Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

Fix checknbpostsforspecificip to prevent sql error (#31096)

Browse Source 
Co-authored-by: Hystepik <lmarcouiller@nltechno.com>
This commit is contained in:
Lucas Marcouiller
2024-09-23 15:03:07 +02:00
committed by GitHub
parent a82410706c
commit 8e43a83880
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/core/lib/public.lib.php
View File

@@ -49,7 +49,7 @@ function checkNbPostsForASpeceificIp($object, $nb_post_max)
} }
if ($nb_post_max > 0) { // Calculate only if there is a limit to check if ($nb_post_max > 0) { // Calculate only if there is a limit to check
$sql = "SELECT COUNT(rowid) as nb_posts"; $sql = "SELECT COUNT(".(!empty($object->table_rowid) ? $object->table_rowid : 'rowid').") as nb_posts";
$sql .= " FROM ".MAIN_DB_PREFIX.$object->table_element; $sql .= " FROM ".MAIN_DB_PREFIX.$object->table_element;
$sql .= " WHERE ip = '".$db->escape($object->ip)."'"; $sql .= " WHERE ip = '".$db->escape($object->ip)."'";
$sql .= " AND datec > '".$db->idate($minmonthpost)."'"; $sql .= " AND datec > '".$db->idate($minmonthpost)."'";
@@ -64,6 +64,7 @@ function checkNbPostsForASpeceificIp($object, $nb_post_max)
} }
} else { } else {
array_push($object->errors, $db->lasterror()); array_push($object->errors, $db->lasterror());
return -1;
} }
} }
if ($nb_post_max > 0 && $nb_post_ip >= $nb_post_max) { if ($nb_post_max > 0 && $nb_post_ip >= $nb_post_max) {