From 279d5f7d6f8ee674b024a2cf3069dc4ea9567398 Mon Sep 17 00:00:00 2001 From: marcus Date: Sat, 24 Jan 2009 11:33:02 +0000 Subject: Fixing access controls on multi-metadata git-svn-id: https://code.elgg.org/elgg/trunk@2614 36083f99-b078-4883-b0ff-0f9b5a30f544 --- engine/lib/metadata.php | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/engine/lib/metadata.php b/engine/lib/metadata.php index deddf8a14..8a77b69fb 100644 --- a/engine/lib/metadata.php +++ b/engine/lib/metadata.php @@ -659,8 +659,13 @@ $query .= " from {$CONFIG->dbprefix}entities e {$join} where"; foreach ($where as $w) $query .= " $w and "; - $query .= get_access_sql_suffix("e"); // Add access controls - $query .= ' and ' . get_access_sql_suffix("m"); // Add access controls + $query .= get_access_sql_suffix("e"); // Add access controls + + $mindex = 1; + foreach($meta_array as $meta_name => $meta_value) { + $query .= ' and ' . get_access_sql_suffix("m{$mindex}"); // Add access controls + $mindex++; + } if (!$count) { $query .= " order by $order_by limit $offset, $limit"; // Add order and limit -- cgit v1.2.3