aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormarcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544>2008-11-20 10:29:41 +0000
committermarcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544>2008-11-20 10:29:41 +0000
commitf23568fd0736277e09d0fd22b935dea2335b5a87 (patch)
tree5426eeacb7f3b04ce3b2b770c489ad008e5a51b5
parentbab90941c9faea31651bb8b562ddec6b5a82292c (diff)
downloadelgg-f23568fd0736277e09d0fd22b935dea2335b5a87.tar.gz
elgg-f23568fd0736277e09d0fd22b935dea2335b5a87.tar.bz2
Fixes #531: Access permissions enforced
git-svn-id: https://code.elgg.org/elgg/trunk@2468 36083f99-b078-4883-b0ff-0f9b5a30f544
-rw-r--r--engine/lib/metadata.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/engine/lib/metadata.php b/engine/lib/metadata.php
index 2e6337694..e7f610601 100644
--- a/engine/lib/metadata.php
+++ b/engine/lib/metadata.php
@@ -422,7 +422,7 @@
$entity_guid = (int)$entity_guid;
$access = get_access_sql_suffix("e");
- $md_access = get_access_sql_suffix("e");
+ $md_access = get_access_sql_suffix("m");
return get_data("SELECT m.*, n.string as name, v.string as value from {$CONFIG->dbprefix}metadata m JOIN {$CONFIG->dbprefix}entities e ON e.guid = m.entity_guid JOIN {$CONFIG->dbprefix}metastrings v on m.value_id = v.id JOIN {$CONFIG->dbprefix}metastrings n on m.name_id = n.id where m.entity_guid=$entity_guid and $access and $md_access", "row_to_elggmetadata");
}