← Back to branch summary

~ubuntu-branches/debian/squeeze/spip/squeeze

« back to all changes in this revision

Viewing changes to ecrire/inc/rechercher.php

  • Committer: Bazaar Package Importer
  • Author(s): Romain Beauxis
  • Date: 2009-08-09 11:13:15 UTC
  • mfrom: (1.1.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20090809111315-c4by9u6jxz7c2ulp
Tags: 2.0.9-1
New upstream release, fixing security issue.
See: http://www.spip-contrib.net/SPIP-Security-Alert-new-version
for more details.

Show diffs side-by-side

added added

removed removed

Lines of Context:
ecrire/inc/rechercher.php
280
280
                        foreach ($joints as $jtable => $jj) {
281
281
                                $it = id_table_objet($table);
282
282
                                $ij =  id_table_objet($jtable);
 
283
                                $table_sql = preg_replace('/^spip_/', '', table_objet_sql($table));
 
284
                                $jtable_sql = preg_replace('/^spip_/', '', table_objet_sql($jtable));                           
283
285
                                if ($jtable == 'document')
284
286
                                        $s = sql_select("id_objet as $it, $ij", "spip_documents_liens", array("objet='$table'",sql_in('id_'.${jtable}, array_keys($jj))), '','','','',$serveur);
285
287
                                else
286
 
                                        $s = sql_select("$it,$ij", "spip_${jtable}s_${table}s", sql_in('id_'.${jtable}, array_keys($jj)), '','','','',$serveur);
 
288
                                        $s = sql_select("$it,$ij", "spip_${jtable_sql}_${table_sql}", sql_in('id_'.${jtable}, array_keys($jj)), '','','','',$serveur);
287
289
                                while ($t = sql_fetch($s)) {
288
290
                                        $id = $t[$it];
289
291
                                        $joint = $jj[$t[$ij]];