From 9fb1da28110192422e7ca7ee8b0fe6996687d3c0 Mon Sep 17 00:00:00 2001
From: Andreas Fischer <bantu@owncloud.com>
Date: Tue, 26 Nov 2013 11:50:14 +0100
Subject: [PATCH] Use bindValue() instead of passing parameters in execute().
---
lib/public/share.php | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/lib/public/share.php b/lib/public/share.php
index 6178a5ae04..e887740ac4 100644
--- a/lib/public/share.php
+++ b/lib/public/share.php
@@ -826,8 +826,10 @@ class Share {
$date = date('Y-m-d H:i', $date->format('U') - $date->getOffset());
}
$query = \OC_DB::prepare('UPDATE `*PREFIX*share` SET `expiration` = ? WHERE `id` = ?');
+ $query->bindValue(1, $date);
foreach ($items as $item) {
- $query->execute(array($date, $item['id']));
+ $query->bindValue(2, (int) $item['id']);
+ $query->execute();
}
return true;
}
--
GitLab