mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

No injections

This commit is contained in:
Roeland Jago Douma 2015-03-30 20:07:12 +02:00
parent b0aa17b13f
commit 0bf06d6691
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/private/share/share.php
View File

@ -1167,7 +1167,8 @@ class Share extends \OC\Share\Constants {
$qb->select('`uid_owner`') $qb->select('`uid_owner`')
->from('`*PREFIX*share`') ->from('`*PREFIX*share`')
->where($qb->expr()->eq('`id`', $shareId)); ->where('`id` = :shareId')
->setParameter(':shareId', $shareId);
$result = $qb->execute(); $result = $qb->execute();
$result = $result->fetch(); $result = $result->fetch();
@ -1215,8 +1216,11 @@ class Share extends \OC\Share\Constants {
$qb = $connection->createQueryBuilder(); $qb = $connection->createQueryBuilder();
$qb->update('`*PREFIX*share`') $qb->update('`*PREFIX*share`')
->set('`share_with`', is_null($password) ? 'NULL' : $qb->expr()->literal(\OC::$server->getHasher()->hash($password))) ->set('`share_with`', ':pass')
->where($qb->expr()->eq('`id`', $shareId)); ->where('`id` = :shareId')
->setParameter(':pass', is_null($password) ? 'NULL' : $qb->expr()->literal(\OC::$server->getHasher()->hash($password)))
->setParameter(':shareId', $shareId);
$qb->execute(); $qb->execute();
return true; return true;