diff options
author | Mario Vavti <mario@mariovavti.com> | 2017-11-02 08:44:46 +0100 |
---|---|---|
committer | Mario Vavti <mario@mariovavti.com> | 2017-11-02 08:44:46 +0100 |
commit | cdaf5f3fc0756157863008df185f6b344241c147 (patch) | |
tree | bd8ddcdb3d01a8dd11655da9189acaac95de0f32 /include/message.php | |
parent | 11cdc36bcc7414002c2e72fd0c45d285d9515f0c (diff) | |
download | volse-hubzilla-cdaf5f3fc0756157863008df185f6b344241c147.tar.gz volse-hubzilla-cdaf5f3fc0756157863008df185f6b344241c147.tar.bz2 volse-hubzilla-cdaf5f3fc0756157863008df185f6b344241c147.zip |
fix issues with diaspora xchans
Diffstat (limited to 'include/message.php')
-rw-r--r-- | include/message.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/include/message.php b/include/message.php index 3f003e020..477c7172c 100644 --- a/include/message.php +++ b/include/message.php @@ -381,7 +381,7 @@ function private_messages_list($uid, $mailbox = '', $start = 0, $numitems = 0) { $chans[] = $s; } - $c = q("select * from xchan where xchan_hash in (" . implode(',',$chans) . ")"); + $c = q("select * from xchan where xchan_hash in (" . protect_sprintf(implode(',',$chans)) . ")"); foreach($r as $k => $rr) { $r[$k]['from'] = find_xchan_in_array($rr['from_xchan'],$c); @@ -420,7 +420,7 @@ function private_messages_fetch_message($channel_id, $messageitem_id, $updatesee $chans[] = $s; } - $c = q("select * from xchan where xchan_hash in (" . implode(',',$chans) . ")"); + $c = q("select * from xchan where xchan_hash in (" . protect_sprintf(implode(',',$chans)) . ")"); foreach($messages as $k => $message) { $messages[$k]['from'] = find_xchan_in_array($message['from_xchan'],$c); @@ -545,7 +545,7 @@ function private_messages_fetch_conversation($channel_id, $messageitem_id, $upda } - $c = q("select * from xchan where xchan_hash in (" . implode(',',$chans) . ")"); + $c = q("select * from xchan where xchan_hash in (" . protect_sprintf(implode(',',$chans)) . ")"); foreach($messages as $k => $message) { $messages[$k]['from'] = find_xchan_in_array($message['from_xchan'],$c); |