From 6ace7d307bb72f0684c1fc4d7095d18db2c17cc3 Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Wed, 1 Dec 2004 16:11:03 +0000 Subject: [PATCH] Sigh... --- includes/SpecialListusers.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/includes/SpecialListusers.php b/includes/SpecialListusers.php index a44901b390..b7913da4ba 100644 --- a/includes/SpecialListusers.php +++ b/includes/SpecialListusers.php @@ -108,13 +108,13 @@ class ListUsersPage extends QueryPage { "LEFT JOIN $group ON ug_group = group_id "; if($this->requestedGroup != '') { - $sql .= "WHERE group_id= '$this->requestedGroup' "; + $sql .= "WHERE group_id= '" . IntVal( $this->requestedGroup ) . "' "; if($this->requestedUser != '') { - $sql .= "AND user_name = '$this->requestedUser' "; + $sql .= "AND user_name = " . $dbr->addQuotes( $this->requestedUser ) . " "; } } else { if($this->requestedUser !='') { - $sql .= "WHERE user_name = '$this->requestedUser' "; + $sql .= "WHERE user_name = " . $dbr->addQuotes( $this->requestedUser ) . " "; } } -- 2.20.1