diff options
| author | Steve Clay <steve@mrclay.org> | 2012-04-17 00:13:46 -0400 |
|---|---|---|
| committer | Steve Clay <steve@mrclay.org> | 2012-04-17 08:36:09 -0400 |
| commit | 76978dd5620b5664e68a3a4068d5bd07771fe7ea (patch) | |
| tree | f457fcd24d91bdffdfd833b80480349da62beb6d /engine/lib/entities.php | |
| parent | f2a80038cddec5ed86b3dd9edb31cf07e3376de8 (diff) | |
| download | elgg-76978dd5620b5664e68a3a4068d5bd07771fe7ea.tar.gz elgg-76978dd5620b5664e68a3a4068d5bd07771fe7ea.tar.bz2 | |
Fixes #4432: Do not escape ORDER BY/GROUP BY clauses in elgg_get_entities
Diffstat (limited to 'engine/lib/entities.php')
| -rw-r--r-- | engine/lib/entities.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/engine/lib/entities.php b/engine/lib/entities.php index 4875b2c2f..7fe913888 100644 --- a/engine/lib/entities.php +++ b/engine/lib/entities.php @@ -915,11 +915,11 @@ function elgg_get_entities(array $options = array()) { } if (!$options['count']) { - if ($options['group_by'] = sanitise_string($options['group_by'])) { + if ($options['group_by']) { $query .= " GROUP BY {$options['group_by']}"; } - if ($options['order_by'] = sanitise_string($options['order_by'])) { + if ($options['order_by']) { $query .= " ORDER BY {$options['order_by']}"; } |