From: Brion Vibber Date: Wed, 1 Dec 2004 16:11:03 +0000 (+0000) Subject: Sigh... X-Git-Tag: 1.5.0alpha1~1175 X-Git-Url: http://git.cyclocoop.org/%24action?a=commitdiff_plain;h=6ace7d307bb72f0684c1fc4d7095d18db2c17cc3;p=lhc%2Fweb%2Fwiklou.git Sigh... --- diff --git a/includes/SpecialListusers.php b/includes/SpecialListusers.php index a44901b390..b7913da4ba 100644 --- a/includes/SpecialListusers.php +++ b/includes/SpecialListusers.php @@ -108,13 +108,13 @@ class ListUsersPage extends QueryPage { "LEFT JOIN $group ON ug_group = group_id "; if($this->requestedGroup != '') { - $sql .= "WHERE group_id= '$this->requestedGroup' "; + $sql .= "WHERE group_id= '" . IntVal( $this->requestedGroup ) . "' "; if($this->requestedUser != '') { - $sql .= "AND user_name = '$this->requestedUser' "; + $sql .= "AND user_name = " . $dbr->addQuotes( $this->requestedUser ) . " "; } } else { if($this->requestedUser !='') { - $sql .= "WHERE user_name = '$this->requestedUser' "; + $sql .= "WHERE user_name = " . $dbr->addQuotes( $this->requestedUser ) . " "; } }