use backticks in sql statement

This commit is contained in:
Uwe Steinmann 2022-03-02 07:32:05 +01:00
parent fc44fdf537
commit c810e99a6b

View File

@ -1027,10 +1027,10 @@ class SeedDMS_Core_Document extends SeedDMS_Core_Object { /* {{{ */
} }
$modeStr = ""; $modeStr = "";
if ($mode!=M_ANY) { if ($mode!=M_ANY) {
$modeStr = " AND mode".$op.(int)$mode; $modeStr = " AND `mode`".$op.(int)$mode;
} }
$queryStr = "SELECT * FROM `tblACLs` WHERE `targetType` = ".T_DOCUMENT. $queryStr = "SELECT * FROM `tblACLs` WHERE `targetType` = ".T_DOCUMENT.
" AND target = " . $this->_id . $modeStr . " ORDER BY `targetType`"; " AND `target` = " . $this->_id . $modeStr . " ORDER BY `targetType`";
$resArr = $db->getResultArray($queryStr); $resArr = $db->getResultArray($queryStr);
if (is_bool($resArr) && !$resArr) if (is_bool($resArr) && !$resArr)
return false; return false;