Zeile 24 | Zeile 24 |
---|
return ''; }
|
return ''; }
|
$search_sql = '1=1';
| $search_sql = 'u.allownotices=1';
|
// List of valid LIKE search fields $user_like_fields = array("username", "email");
| // List of valid LIKE search fields $user_like_fields = array("username", "email");
|
Zeile 54 | Zeile 54 |
---|
default: $direction = "="; }
|
default: $direction = "="; }
|
$search_sql .= " AND u.{$search_field}{$direction_field}'".$db->escape_string_like($conditions[$search_field])."'";
| $search_sql .= " AND u.{$search_field}{$direction}'".$db->escape_string_like($conditions[$search_field])."'";
|
} }
| } }
|
Zeile 74 | Zeile 74 |
---|
case "sqlite3": case "sqlite2": $additional_sql .= " OR ','||additionalgroups||',' LIKE '%,{$usergroup},%'";
|
case "sqlite3": case "sqlite2": $additional_sql .= " OR ','||additionalgroups||',' LIKE '%,{$usergroup},%'";
|
| break;
|
default: $additional_sql .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; } }
|
default: $additional_sql .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; } }
|
$search_sql .= " AND (u.usergroup IN (".implode(",", $conditions['usergroup']).") {$additional_sql})";
| $search_sql .= " AND (u.usergroup IN (".$db->escape_string(implode(",", $conditions['usergroup'])).") {$additional_sql})";
|
}
return $search_sql;
| }
return $search_sql;
|