deblan/pdnsmanager
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fixed possible bux if multiple persons can acces one domain

Browse source
This commit is contained in:
Lukas Metzger 2016-01-16 16:25:56 +01:00
parent 9415367dfb
commit 818cb9fbc5
1 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
api/domains.php
View file

@ -23,15 +23,15 @@ require_once '../lib/session.php';
$input = json_decode(file_get_contents('php://input'));
$sql = "
SELECT D.id,D.name,D.type,count(R.domain_id) AS records,P.user
SELECT D.id,D.name,D.type,count(R.domain_id) AS records
FROM domains D
LEFT OUTER JOIN records R ON D.id = R.domain_id
LEFT OUTER JOIN permissions P ON D.id = P.domain
WHERE (P.user=? OR ?)
GROUP BY D.id
HAVING
(D.name LIKE ? OR ?) AND
(D.type=? OR ?) AND
(P.user=? OR ?)
(D.type=? OR ?)
";
if(isset($input->sort->field) && $input->sort->field != "") {
@ -76,9 +76,9 @@ if(isset($input->type)) {
}
$stmt->bind_param("sisiii",
$id_filter, $id_filter_used,
$name_filter, $name_filter_used,
$type_filter, $type_filter_used,
$id_filter, $id_filter_used
$type_filter, $type_filter_used
);
$stmt->execute();
@ -87,7 +87,6 @@ $result = $stmt->get_result();
$retval = Array();
while($obj = $result->fetch_object()) {
unset($obj->user);
$retval[] = $obj;
}