aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorbrettp <brettp@36083f99-b078-4883-b0ff-0f9b5a30f544>2011-01-02 21:07:43 +0000
committerbrettp <brettp@36083f99-b078-4883-b0ff-0f9b5a30f544>2011-01-02 21:07:43 +0000
commitb329edf4666cb97f9589578a5cf5332d1c8e68de (patch)
treea7ddc97d916ba2d47388f6d9aca8052bd865ff70
parent177f9ffbd44f640b5fc4b0645562b6b74e2c0d7e (diff)
downloadelgg-b329edf4666cb97f9589578a5cf5332d1c8e68de.tar.gz
elgg-b329edf4666cb97f9589578a5cf5332d1c8e68de.tar.bz2
set_private_setting() checks if the guid is a real entity.
git-svn-id: http://code.elgg.org/elgg/trunk@7813 36083f99-b078-4883-b0ff-0f9b5a30f544
-rw-r--r--engine/lib/private_settings.php11
1 files changed, 8 insertions, 3 deletions
diff --git a/engine/lib/private_settings.php b/engine/lib/private_settings.php
index 0d86b93a1..d21ee45e6 100644
--- a/engine/lib/private_settings.php
+++ b/engine/lib/private_settings.php
@@ -228,7 +228,7 @@ function elgg_get_entities_from_private_settings(array $options = array()) {
}
$options['wheres'] = array_merge($options['wheres'], $clauses['wheres']);
-
+
// merge joins to pass to get_entities()
if (isset($options['joins']) && !is_array($options['joins'])) {
$options['joins'] = array($options['joins']);
@@ -322,7 +322,7 @@ $pairs = NULL, $pair_operator = 'AND') {
if (is_array($pairs)) {
// join counter for incremental joins in pairs
$i = 1;
-
+
// check if this is an array of pairs or just a single pair.
if (isset($pairs['name']) || isset($pairs['value'])) {
$pairs = array($pairs);
@@ -405,7 +405,7 @@ $pairs = NULL, $pair_operator = 'AND') {
if ($where) {
$return['wheres'][] = "($where)";
}
-
+
return $return;
}
@@ -495,6 +495,11 @@ function set_private_setting($entity_guid, $name, $value) {
$name = sanitise_string($name);
$value = sanitise_string($value);
+ $entity = get_entity($entity_guid);
+ if (!$entity instanceof ElggEntity) {
+ return false;
+ }
+
$result = insert_data("INSERT into {$CONFIG->dbprefix}private_settings
(entity_guid, name, value) VALUES
($entity_guid, '{$name}', '{$value}')