[aur-dev] [PATCH] RPC: Fix info queries when using package IDs

Lukas Fleischer archlinux at cryptocrack.de
Mon Aug 22 02:32:01 EDT 2011


Info queries using package IDs were no longer working due to commit
c6d84b3a8df10c522d79c754d4f73cb2a352586f, which introduced a table join
in process_query(), thus making the "ID" column ambiguous. Fix this by
explicitly specifying the table to use. Fixes FS#25696.

Signed-off-by: Lukas Fleischer <archlinux at cryptocrack.de>
---
 web/lib/aurjson.class.php |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/web/lib/aurjson.class.php b/web/lib/aurjson.class.php
index 277c824..b596359 100644
--- a/web/lib/aurjson.class.php
+++ b/web/lib/aurjson.class.php
@@ -203,7 +203,7 @@ class AurJSON {
             // just using sprintf to coerce the pqd to an int
             // should handle sql injection issues, since sprintf will
             // bork if not an int, or convert the string to a number 0
-            $where_condition = "ID={$pqdata}";
+            $where_condition = "Packages.ID={$pqdata}";
         }
         else {
             $where_condition = sprintf("Name=\"%s\"",
-- 
1.7.6



More information about the aur-dev mailing list