keith/friendica
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Replace REGEXP with LOCATE for allow_cid and deny_cid

Browse source
This commit is contained in:
Philipp 2021-10-31 19:51:03 +01:00
parent 1a2f33578b
commit fc233fd5e1
No known key found for this signature in database
GPG key ID: 24A7501396EB5432
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/Security/PermissionSet/Repository/PermissionSet.php
View file

@ -137,7 +137,7 @@ class PermissionSet extends BaseRepository
$cid = $cdata['user']; $cid = $cdata['user'];
} else { } else {
$public_contact_str = $this->aclFormatter->toString($cid); $public_contact_str = $this->aclFormatter->toString($cid);
$user_contact_str = '<<>>'; $user_contact_str = '';
} }
$groups = []; $groups = [];
@ -155,13 +155,13 @@ class PermissionSet extends BaseRepository
} }
if (!empty($user_contact_str)) { if (!empty($user_contact_str)) {
$condition = ["`uid` = ? AND (NOT (`deny_cid` REGEXP ? OR `deny_cid` REGEXP ? OR deny_gid REGEXP ?) $condition = ["`uid` = ? AND (NOT (LOCATE(?, `deny_cid`) OR LOCATE(?, `deny_cid`) OR deny_gid REGEXP ?)
AND (allow_cid REGEXP ? OR allow_cid REGEXP ? OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))", AND (LOCATE(?, allow_cid) OR LOCATE(?, allow_cid) OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))",
$uid, $user_contact_str, $public_contact_str, $group_str, $uid, $user_contact_str, $public_contact_str, $group_str,
$user_contact_str, $public_contact_str, $group_str]; $user_contact_str, $public_contact_str, $group_str];
} else { } else {
$condition = ["`uid` = ? AND (NOT (`deny_cid` REGEXP ? OR deny_gid REGEXP ?) $condition = ["`uid` = ? AND (NOT (LOCATE(?, `deny_cid`) OR deny_gid REGEXP ?)
AND (allow_cid REGEXP ? OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))", AND (LOCATE(?, allow_cid) OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))",
$uid, $public_contact_str, $group_str, $public_contact_str, $group_str]; $uid, $public_contact_str, $group_str, $public_contact_str, $group_str];
} }