Skip to content

ZitAdmin needs to quote $id #1

@pjaol

Description

@pjaol

Login fails in the ADMIN_SERVER fails because ZitAdmin::ZitAdmin has an unquoted $id literal
that gets interrupted as a DB column

Patch below

diff --git a/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php b/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
index 53c4dfd..b1dde3e 100755
--- a/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
+++ b/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
@@ -38,8 +38,8 @@ class ZitAdmin
                                from
                                ".DBConvertor::convertCase('zit_admin')." a,
                                ".DBConvertor::convertCase('admin_level')." l
-                               where a.admin_level_id = l.level_id and a.admin_id = $id";
-                               
+                               where a.admin_level_id = l.level_id and a.admin_id = '$id'";
+       error_log( $sql) ;                      
                $result = $db->fetchAll($sql);
                foreach($result as $row){
                        switch(DB_TYPE) {

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions