Commit a4b6ca0f authored by jan.koester's avatar jan.koester
Browse files

fixed securehole

parent faa8230d

plugins/content/content.cpp

+2 −2
Changes for plugins/content/content.cpp: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -67,12 +67,12 @@ namespace blogi { 
                    sql = "select content.id,content.title,content.descrition,users.username,content.created from content ";

                    sql <<"LEFT JOIN users ON content.author=users.id LEFT JOIN tags_content ON tags_content.content_id=content.id where tags_content.tag_id='"

                    << res[0][0]

                    <<"' ORDER BY id DESC OFFSET " << start << " LIMIT " << end;

                    <<"' ORDER BY id DESC OFFSET '" << start << "' LIMIT " << end;

                    ncount=Args->database->exec(&sql,res);

                }

            } else {

                sql="select content.id,content.title,content.descrition,users.username,content.created from content LEFT JOIN users ON content.author=users.id ORDER BY id DESC";

                sql << " OFFSET " << start << " LIMIT " << end;

                sql << " OFFSET '" << start << "' LIMIT " << end;

                ncount=Args->database->exec(&sql,res);

            }