From bda5906a8d29fc1c59208860e8f5f21c1b169557 Mon Sep 17 00:00:00 2001 From: Sem Date: Thu, 13 Dec 2012 01:59:41 +0100 Subject: Fixed security issue. --- engine/classes/ElggVolatileMetadataCache.php | 1 + 1 file changed, 1 insertion(+) diff --git a/engine/classes/ElggVolatileMetadataCache.php b/engine/classes/ElggVolatileMetadataCache.php index 24ae58d42..ab45aadec 100644 --- a/engine/classes/ElggVolatileMetadataCache.php +++ b/engine/classes/ElggVolatileMetadataCache.php @@ -279,6 +279,7 @@ class ElggVolatileMetadataCache { ), 'selects' => array('n.string AS name', 'v.string AS value'), 'order_by' => 'n_table.entity_guid, n_table.time_created ASC', + 'wheres' => array(get_access_sql_suffix('n_table')), ); $data = elgg_get_metadata($options); -- cgit v1.2.3