diff options
| author | Robin Appelman <icewind@owncloud.com> | 2015-11-05 16:32:08 +0100 |
|---|---|---|
| committer | Robin Appelman <icewind@owncloud.com> | 2015-11-05 16:41:33 +0100 |
| commit | d36e1bbab23253673339a2b1b6d81a906d83fa5b (patch) | |
| tree | 67e7c2cf561914ec9370c7181f16b122cabe8c35 /lib/private/files/cache | |
| parent | d514200b560c035d71304b54439c4b917de74069 (diff) | |
| download | nextcloud-server-d36e1bbab23253673339a2b1b6d81a906d83fa5b.tar.gz nextcloud-server-d36e1bbab23253673339a2b1b6d81a906d83fa5b.zip | |
escape like parameter for move queries
Diffstat (limited to 'lib/private/files/cache')
| -rw-r--r-- | lib/private/files/cache/cache.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/files/cache/cache.php b/lib/private/files/cache/cache.php index 666385b5aad..40477243324 100644 --- a/lib/private/files/cache/cache.php +++ b/lib/private/files/cache/cache.php @@ -499,7 +499,7 @@ class Cache { if ($sourceData['mimetype'] === 'httpd/unix-directory') { //find all child entries $sql = 'SELECT `path`, `fileid` FROM `*PREFIX*filecache` WHERE `storage` = ? AND `path` LIKE ?'; - $result = $this->connection->executeQuery($sql, [$sourceStorageId, $sourcePath . '/%']); + $result = $this->connection->executeQuery($sql, [$sourceStorageId, $this->connection->escapeLikeParameter($sourcePath) . '/%']); $childEntries = $result->fetchAll(); $sourceLength = strlen($sourcePath); $this->connection->beginTransaction(); |