From 014ba7d5c18172db7ff6940df12f0a785c9acbdb Mon Sep 17 00:00:00 2001 From: nickw Date: Fri, 12 Nov 2010 23:37:29 +0000 Subject: Updating ElggEntity::clearMetaData() to fail when passed a non-existent metadata name. Fixes #2273 git-svn-id: http://code.elgg.org/elgg/trunk@7301 36083f99-b078-4883-b0ff-0f9b5a30f544 --- engine/lib/metadata.php | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) (limited to 'engine/lib/metadata.php') diff --git a/engine/lib/metadata.php b/engine/lib/metadata.php index ffa7b74e0..8b6fe364f 100644 --- a/engine/lib/metadata.php +++ b/engine/lib/metadata.php @@ -60,12 +60,19 @@ function remove_metadata($entity_guid, $name, $value = "") { $entity_guid = (int) $entity_guid; $name = sanitise_string($name); $value = sanitise_string($value); + + $name = get_metastring_id($name); + if ($name === FALSE) { + // name doesn't exist + return FALSE; + } - $query = "SELECT * from {$CONFIG->dbprefix}metadata" - . " WHERE entity_guid = $entity_guid and name_id=" . add_metastring($name); - + $query = "SELECT * from {$CONFIG->dbprefix}metadata WHERE entity_guid = '$entity_guid' and name_id = '$name'"; if ($value != "") { - $query .= " and value_id=" . add_metastring($value); + $value = get_metastring_id($value); + if ($value !== FALSE) { + $query .= " AND value_id = '$value'"; + } } if ($existing = get_data($query)) { -- cgit v1.2.3