diff options
| author | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2008-11-20 10:29:41 +0000 |
|---|---|---|
| committer | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2008-11-20 10:29:41 +0000 |
| commit | f23568fd0736277e09d0fd22b935dea2335b5a87 (patch) | |
| tree | 5426eeacb7f3b04ce3b2b770c489ad008e5a51b5 /engine | |
| parent | bab90941c9faea31651bb8b562ddec6b5a82292c (diff) | |
| download | elgg-f23568fd0736277e09d0fd22b935dea2335b5a87.tar.gz elgg-f23568fd0736277e09d0fd22b935dea2335b5a87.tar.bz2 | |
Fixes #531: Access permissions enforced
git-svn-id: https://code.elgg.org/elgg/trunk@2468 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'engine')
| -rw-r--r-- | engine/lib/metadata.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/engine/lib/metadata.php b/engine/lib/metadata.php index 2e6337694..e7f610601 100644 --- a/engine/lib/metadata.php +++ b/engine/lib/metadata.php @@ -422,7 +422,7 @@ $entity_guid = (int)$entity_guid; $access = get_access_sql_suffix("e");
- $md_access = get_access_sql_suffix("e"); + $md_access = get_access_sql_suffix("m"); return get_data("SELECT m.*, n.string as name, v.string as value from {$CONFIG->dbprefix}metadata m JOIN {$CONFIG->dbprefix}entities e ON e.guid = m.entity_guid JOIN {$CONFIG->dbprefix}metastrings v on m.value_id = v.id JOIN {$CONFIG->dbprefix}metastrings n on m.name_id = n.id where m.entity_guid=$entity_guid and $access and $md_access", "row_to_elggmetadata"); } |