aboutsummaryrefslogtreecommitdiff
path: root/engine/lib
diff options
context:
space:
mode:
authorSteve Clay <steve@mrclay.org>2012-04-17 00:13:46 -0400
committerSteve Clay <steve@mrclay.org>2012-04-17 08:36:09 -0400
commit76978dd5620b5664e68a3a4068d5bd07771fe7ea (patch)
treef457fcd24d91bdffdfd833b80480349da62beb6d /engine/lib
parentf2a80038cddec5ed86b3dd9edb31cf07e3376de8 (diff)
downloadelgg-76978dd5620b5664e68a3a4068d5bd07771fe7ea.tar.gz
elgg-76978dd5620b5664e68a3a4068d5bd07771fe7ea.tar.bz2
Fixes #4432: Do not escape ORDER BY/GROUP BY clauses in elgg_get_entities
Diffstat (limited to 'engine/lib')
-rw-r--r--engine/lib/entities.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/engine/lib/entities.php b/engine/lib/entities.php
index 4875b2c2f..7fe913888 100644
--- a/engine/lib/entities.php
+++ b/engine/lib/entities.php
@@ -915,11 +915,11 @@ function elgg_get_entities(array $options = array()) {
}
if (!$options['count']) {
- if ($options['group_by'] = sanitise_string($options['group_by'])) {
+ if ($options['group_by']) {
$query .= " GROUP BY {$options['group_by']}";
}
- if ($options['order_by'] = sanitise_string($options['order_by'])) {
+ if ($options['order_by']) {
$query .= " ORDER BY {$options['order_by']}";
}