diff options
| author | friendica <info@friendica.com> | 2013-06-27 21:40:56 -0700 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2013-06-27 21:40:56 -0700 |
| commit | 6fba7ac1aff92e327357d21b00e8919e041d8395 (patch) | |
| tree | 2b13b55a12616503d187e56cd858ec57f3e29002 | |
| parent | ae8316a2ca023ab49275dd3671180bf0e067abab (diff) | |
| download | volse-hubzilla-6fba7ac1aff92e327357d21b00e8919e041d8395.tar.gz volse-hubzilla-6fba7ac1aff92e327357d21b00e8919e041d8395.tar.bz2 volse-hubzilla-6fba7ac1aff92e327357d21b00e8919e041d8395.zip | |
fix cid query
| -rwxr-xr-x | include/items.php | 2 | ||||
| -rw-r--r-- | mod/network.php | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/include/items.php b/include/items.php index 2e54b8707..c4d2a86af 100755 --- a/include/items.php +++ b/include/items.php @@ -4744,7 +4744,7 @@ function items_fetch($arr,$channel = null,$observer_hash = null,$client_mode = C intval($uid) ); if($r) { - $sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND uid = " . intval($arr['uid']) . " AND ( author_xchan = " . dbesc($r[0]['abook_xchan']) . " or owner_xchan = " . dbesc($r[0]['abook_xchan']) . " ) and item_restrict = 0 ) "; + $sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND uid = " . intval($arr['uid']) . " AND ( author_xchan = '" . dbesc($r[0]['abook_xchan']) . "' or owner_xchan = '" . dbesc($r[0]['abook_xchan']) . "' ) and item_restrict = 0 ) "; } else { $result['message'] = t('Connection not found.'); diff --git a/mod/network.php b/mod/network.php index bbd9f9de7..aa134eece 100644 --- a/mod/network.php +++ b/mod/network.php @@ -465,7 +465,7 @@ function network_content(&$a, $update = 0, $load = false) { intval(local_user()) ); if($r) { - $sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND uid = " . intval(local_user()) . " AND ( author_xchan = " . dbesc($r[0]['abook_xchan']) . " or owner_xchan = " . dbesc($r[0]['abook_xchan']) . " ) and item_restrict = 0 ) "; + $sql_extra = " AND item.parent IN ( SELECT DISTINCT parent FROM item WHERE true $sql_options AND uid = " . intval(local_user()) . " AND ( author_xchan = '" . dbesc($r[0]['abook_xchan']) . "' or owner_xchan = '" . dbesc($r[0]['abook_xchan']) . "' ) and item_restrict = 0 ) "; $o = '<h2>' . t('Contact: ') . $r[0]['name'] . '</h2>' . $o; } else { |