diff options
author | Morris Jobke <hey@morrisjobke.de> | 2018-10-16 14:55:41 +0200 |
---|---|---|
committer | Morris Jobke <hey@morrisjobke.de> | 2018-10-16 15:24:02 +0200 |
commit | b458ed9c82eeca4eafb4e86b7774ceba90130838 (patch) | |
tree | 2f7187dd4de5c1ee7a83247759c6d3b975872aa7 /lib/private/User | |
parent | ad66b0f9ab010ee00d249d6f8512d30332e8a0af (diff) | |
download | nextcloud-server-b458ed9c82eeca4eafb4e86b7774ceba90130838.tar.gz nextcloud-server-b458ed9c82eeca4eafb4e86b7774ceba90130838.zip |
Properly escape column name in "createFunction" call
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
Diffstat (limited to 'lib/private/User')
-rw-r--r-- | lib/private/User/Manager.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/private/User/Manager.php b/lib/private/User/Manager.php index 16a911b90ac..80f504d8888 100644 --- a/lib/private/User/Manager.php +++ b/lib/private/User/Manager.php @@ -475,9 +475,9 @@ class Manager extends PublicEmitter implements IUserManager { */ public function countDisabledUsersOfGroups(array $groups): int { $queryBuilder = \OC::$server->getDatabaseConnection()->getQueryBuilder(); - $queryBuilder->select($queryBuilder->createFunction('COUNT(Distinct uid)')) + $queryBuilder->select($queryBuilder->createFunction('COUNT(DISTINCT ' . $queryBuilder->getColumnName('uid') . ')')) ->from('preferences', 'p') - ->innerJoin('p', 'group_user', 'g', 'p.userid = g.uid') + ->innerJoin('p', 'group_user', 'g', $queryBuilder->expr()->eq('p.userid', 'g.uid')) ->where($queryBuilder->expr()->eq('appid', $queryBuilder->createNamedParameter('core'))) ->andWhere($queryBuilder->expr()->eq('configkey', $queryBuilder->createNamedParameter('enabled'))) ->andWhere($queryBuilder->expr()->eq('configvalue', $queryBuilder->createNamedParameter('false'), IQueryBuilder::PARAM_STR)) |