add missing backticks, use executeAudited in post_deleteGroup and post_removeFromGroup
This commit is contained in:
parent
fc309caf16
commit
961a001af3
|
@ -1586,10 +1586,10 @@ class Share {
|
||||||
|
|
||||||
public static function post_removeFromGroup($arguments) {
|
public static function post_removeFromGroup($arguments) {
|
||||||
// TODO Don't call if user deleted?
|
// TODO Don't call if user deleted?
|
||||||
$query = \OC_DB::prepare('SELECT `id`, `share_type` FROM `*PREFIX*share`'
|
$sql = 'SELECT `id`, `share_type` FROM `*PREFIX*share`'
|
||||||
.' WHERE (`share_type` = ? AND `share_with` = ?) OR (`share_type` = ? AND `share_with` = ?)');
|
.' WHERE (`share_type` = ? AND `share_with` = ?) OR (`share_type` = ? AND `share_with` = ?)';
|
||||||
$result = $query->execute(array(self::SHARE_TYPE_GROUP, $arguments['gid'], self::$shareTypeGroupUserUnique,
|
$result = \OC_DB::executeAudited($sql, array(self::SHARE_TYPE_GROUP, $arguments['gid'],
|
||||||
$arguments['uid']));
|
self::$shareTypeGroupUserUnique, $arguments['uid']));
|
||||||
while ($item = $result->fetchRow()) {
|
while ($item = $result->fetchRow()) {
|
||||||
if ($item['share_type'] == self::SHARE_TYPE_GROUP) {
|
if ($item['share_type'] == self::SHARE_TYPE_GROUP) {
|
||||||
// Delete all reshares by this user of the group share
|
// Delete all reshares by this user of the group share
|
||||||
|
@ -1601,8 +1601,8 @@ class Share {
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function post_deleteGroup($arguments) {
|
public static function post_deleteGroup($arguments) {
|
||||||
$query = \OC_DB::prepare('SELECT id FROM `*PREFIX*share` WHERE `share_type` = ? AND `share_with` = ?');
|
$sql = 'SELECT `id` FROM `*PREFIX*share` WHERE `share_type` = ? AND `share_with` = ?';
|
||||||
$result = $query->execute(array(self::SHARE_TYPE_GROUP, $arguments['gid']));
|
$result = \OC_DB::executeAudited($sql, array(self::SHARE_TYPE_GROUP, $arguments['gid']));
|
||||||
while ($item = $result->fetchRow()) {
|
while ($item = $result->fetchRow()) {
|
||||||
self::delete($item['id']);
|
self::delete($item['id']);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue