25
1
mirror of https://github.com/processone/ejabberd.git synced 2024-11-22 16:20:52 +01:00

Fix escaping for sql part of mamsub from muc mam

This commit is contained in:
Paweł Chmielowski 2019-04-30 13:36:31 +02:00
parent c7d04a82a2
commit b071c4906f

View File

@ -420,11 +420,11 @@ make_sql_query(User, LServer, MAMQuery, RSM, ExtraUsernames) ->
{UserSel, UserWhere} = case ExtraUsernames of
Users when is_list(Users) ->
EscUsers = [<<"'", (Escape(U))/binary, "'">> || U <- [SUser | Users]],
EscUsers = [<<"'", (Escape(U))/binary, "'">> || U <- [User | Users]],
{<<" username,">>,
[<<" username in (">>, str:join(EscUsers, <<",">>), <<")">>]};
subscribers_table ->
SJid = jid:encode({User, LServer, <<>>}),
SJid = Escape(jid:encode({User, LServer, <<>>})),
{<<" username,">>,
[<<" (username = '">>, SUser, <<"'">>,
<<" or username in (select concat(room, '@', host) ",