Commit 66adb01c authored by Romain Therville's avatar Romain Therville 🐭
Browse files

Update to class.tx_nG6_db.php

The function get_all_names_starting_with() has been reworked not to
return the user's passwords.

Issue #189
parent a2966774
...@@ -3044,7 +3044,8 @@ static function get_project_runs($project_id, $orderby='', $limit='') { ...@@ -3044,7 +3044,8 @@ static function get_project_runs($project_id, $orderby='', $limit='') {
*/ */
static function get_all_names_starting_with($name_start, $user_col) { static function get_all_names_starting_with($name_start, $user_col) {
$queryParts = Array( $queryParts = Array(
'SELECT' => 'fe_users.uid, fe_users.username, fe_users.last_name, fe_users.first_name, fe_users.password, fe_users.email, fe_users.cruser_id, fe_groups.title, fe_groups.tx_nG6_organism, fe_groups.tx_nG6_location', // 'SELECT' => 'fe_users.uid, fe_users.username, fe_users.last_name, fe_users.first_name, fe_users.password, fe_users.email, fe_users.cruser_id, fe_groups.title, fe_groups.tx_nG6_organism, fe_groups.tx_nG6_location',
'SELECT' => 'fe_users.uid, fe_users.username, fe_users.last_name, fe_users.first_name, fe_users.email, fe_users.cruser_id, fe_groups.title, fe_groups.tx_nG6_organism, fe_groups.tx_nG6_location',
'FROM' => 'fe_users INNER JOIN fe_groups ON fe_users.usergroup=fe_groups.uid', 'FROM' => 'fe_users INNER JOIN fe_groups ON fe_users.usergroup=fe_groups.uid',
'WHERE' => 'fe_users.'.$user_col.' LIKE "'.$name_start.'%"', 'WHERE' => 'fe_users.'.$user_col.' LIKE "'.$name_start.'%"',
'GROUPBY' => '', 'GROUPBY' => '',
...@@ -3059,7 +3060,7 @@ static function get_project_runs($project_id, $orderby='', $limit='') { ...@@ -3059,7 +3060,7 @@ static function get_project_runs($project_id, $orderby='', $limit='') {
'username' => $res_row['username'], 'username' => $res_row['username'],
'first_name' => $res_row['first_name'], 'first_name' => $res_row['first_name'],
'last_name' => $res_row['last_name'], 'last_name' => $res_row['last_name'],
'password' => $res_row['password'], // 'password' => $res_row['password'],
'email' => $res_row['email'], 'email' => $res_row['email'],
'title' => $res_row['title'], 'title' => $res_row['title'],
'cruser_id' => $res_row['cruser_id'], 'cruser_id' => $res_row['cruser_id'],
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment