fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-07 10:41:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'security/rve-2025-1'

Browse source
This commit is contained in:
Kijin Sung 2025-02-18 11:23:19 +09:00
commit 5f5cd81f1b
3 changed files with 44 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
common/framework/parsers/dbquery/Query.php
View file

@ -619,7 +619,7 @@ class Query extends VariableBase
// Get the name of the column or expression to order by.
$column_name = '';
list($column_name, $is_expression) = $orderby->getValue($this->_args);
list($column_name, $is_expression, $is_default_value) = $orderby->getValue($this->_args);
if (!$column_name)
{
continue;
@ -628,6 +628,10 @@ class Query extends VariableBase
{
$column_name = self::quoteName($column_name);
}
elseif (!$is_default_value)
{
continue;
}
// Get the ordering (ASC or DESC).
if (preg_match('/^(ASC|DESC)$/i', $orderby->order_var ?: '', $matches))