oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

forward porting UserList profile field name bug fix

Browse source
This commit is contained in:
Colin Kuskie 2008-12-03 22:39:11 +00:00
parent 1a3ad244b9
commit 49cbf11ed2
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog/7.x.x.txt
View file

@ -1,6 +1,7 @@
7.6.6 7.6.6
- fixed #8792: Image Preview gives ERROR in Collateral Manager - fixed #8792: Image Preview gives ERROR in Collateral Manager
- fixed #8774: Forum Rich Edit no longer supports indent/outdent - fixed #8774: Forum Rich Edit no longer supports indent/outdent
- fixed #4173: fieldnames in profilefields can contain spaces
7.6.5 7.6.5
- security: A problem was discovered and fixed in which users could email executable attachments to a collaboration system and then when viewed online, could execute them. - security: A problem was discovered and fixed in which users could email executable attachments to a collaboration system and then when viewed online, could execute them.

3
lib/WebGUI/Asset/Wobject/UserList.pm
View file

@ -436,8 +436,9 @@ sub view {
# Query user profile data. Exclude the visitor account and users that have been deactivated. # Query user profile data. Exclude the visitor account and users that have been deactivated.
$sql = "select distinct users.userId, users.userName, userProfileData.publicProfile "; $sql = "select distinct users.userId, users.userName, userProfileData.publicProfile ";
# Include remaining profile fields in the query # Include remaining profile fields in the query
my $dbh = $self->session->db->dbh;
foreach my $profileField (@profileFields){ foreach my $profileField (@profileFields){
$sql .= ", userProfileData.$profileField->{fieldName}"; $sql .= ", userProfileData." . $dbh->quote_identifier($profileField->{fieldName});
} }
$sql .= " from users"; $sql .= " from users";
$sql .= " left join userProfileData using(userId) where users.userId != '1' and users.status = 'active'"; $sql .= " left join userProfileData using(userId) where users.userId != '1' and users.status = 'active'";