From 064b96ec1c0c6637493bf30fb97b0194cec9f89b Mon Sep 17 00:00:00 2001 From: Arthur Schiwon Date: Mon, 1 Feb 2016 22:45:52 +0100 Subject: [PATCH] update routine was lacking where statements :see_no_evil: --- lib/private/comments/manager.php | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/lib/private/comments/manager.php b/lib/private/comments/manager.php index 23add3fd2c3..28bd3b0916a 100644 --- a/lib/private/comments/manager.php +++ b/lib/private/comments/manager.php @@ -629,9 +629,15 @@ class Manager implements ICommentsManager { $affectedRows = $qb ->update('comments_read_markers') ->set('user_id', $values['user_id']) - ->set('marker_datetime', $values['marker_datetime'], 'datetime') + ->set('marker_datetime', $values['marker_datetime']) ->set('object_type', $values['object_type']) ->set('object_id', $values['object_id']) + ->where($qb->expr()->eq('user_id', $qb->createParameter('user_id'))) + ->andWhere($qb->expr()->eq('object_type', $qb->createParameter('object_type'))) + ->andWhere($qb->expr()->eq('object_id', $qb->createParameter('object_id'))) + ->setParameter('user_id', $user->getUID(), \PDO::PARAM_STR) + ->setParameter('object_type', $objectType, \PDO::PARAM_STR) + ->setParameter('object_id', $objectId, \PDO::PARAM_STR) ->execute(); if ($affectedRows > 0) { -- 2.39.5