mirror of
https://gitlab.com/davical-project/davical.git
synced 2026-09-19 05:59:02 +00:00
Force casting to text in case someone is using integer usernames.
This commit is contained in:
parent
1327fee9a8
commit
2fd4a95285
@ -322,9 +322,9 @@ class CalDAVRequest
|
|||||||
$params[':resourcetypes'] = sprintf('<DAV::collection/><urn:ietf:params:xml:ns:caldav:%s/>', $this->collection_type );
|
$params[':resourcetypes'] = sprintf('<DAV::collection/><urn:ietf:params:xml:ns:caldav:%s/>', $this->collection_type );
|
||||||
$sql = <<<EOSQL
|
$sql = <<<EOSQL
|
||||||
INSERT INTO collection ( user_no, parent_container, dav_name, dav_displayname, is_calendar, created, modified, dav_etag, resourcetypes )
|
INSERT INTO collection ( user_no, parent_container, dav_name, dav_displayname, is_calendar, created, modified, dav_etag, resourcetypes )
|
||||||
VALUES( (SELECT user_no FROM usr WHERE username = :username),
|
VALUES( (SELECT user_no FROM usr WHERE username = text(:username)),
|
||||||
:parent_container, :dav_name,
|
:parent_container, :dav_name,
|
||||||
(SELECT fullname FROM usr WHERE username = :username) || :boxname,
|
(SELECT fullname FROM usr WHERE username = text(:username)) || :boxname,
|
||||||
FALSE, current_timestamp, current_timestamp, '1', :resourcetypes )
|
FALSE, current_timestamp, current_timestamp, '1', :resourcetypes )
|
||||||
EOSQL;
|
EOSQL;
|
||||||
|
|
||||||
|
|||||||
@ -360,9 +360,9 @@ class DAVResource
|
|||||||
$params[':resourcetypes'] = sprintf('<DAV::collection/><urn:ietf:params:xml:ns:caldav:%s/>', $this->collection_type );
|
$params[':resourcetypes'] = sprintf('<DAV::collection/><urn:ietf:params:xml:ns:caldav:%s/>', $this->collection_type );
|
||||||
$sql = <<<EOSQL
|
$sql = <<<EOSQL
|
||||||
INSERT INTO collection ( user_no, parent_container, dav_name, dav_displayname, is_calendar, created, modified, dav_etag, resourcetypes )
|
INSERT INTO collection ( user_no, parent_container, dav_name, dav_displayname, is_calendar, created, modified, dav_etag, resourcetypes )
|
||||||
VALUES( (SELECT user_no FROM usr WHERE username = :username),
|
VALUES( (SELECT user_no FROM usr WHERE username = text(:username)),
|
||||||
:parent_container, :dav_name,
|
:parent_container, :dav_name,
|
||||||
(SELECT fullname FROM usr WHERE username = :username) || :boxname,
|
(SELECT fullname FROM usr WHERE username = text(:username)) || :boxname,
|
||||||
FALSE, current_timestamp, current_timestamp, '1', :resourcetypes )
|
FALSE, current_timestamp, current_timestamp, '1', :resourcetypes )
|
||||||
EOSQL;
|
EOSQL;
|
||||||
$qry = new AwlQuery( $sql, $params );
|
$qry = new AwlQuery( $sql, $params );
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user