finn/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix session API broken and SQL pretection

Browse source
This commit is contained in:
Unknwon 2014-11-04 11:37:15 -05:00
parent 69a98236bd
commit 0c5ba4573a
7 changed files with 5 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
models/repo.go
View file

@ -1161,7 +1161,7 @@ func SearchRepositoryByName(opt SearchOption) (repos []*Repository, err error) {
if !opt.Private {
sess.And("is_private=false")
}
sess.And("lower_name like '%" + opt.Keyword + "%'").Find(&repos)
sess.And("lower_name like ?", "%"+opt.Keyword+"%").Find(&repos)
return repos, err
}

2
models/user.go
View file

@ -581,7 +581,7 @@ func SearchUserByName(opt SearchOption) (us []*User, err error) {
opt.Keyword = strings.ToLower(opt.Keyword)
us = make([]*User, 0, opt.Limit)
err = x.Limit(opt.Limit).Where("type=0").And("lower_name like '%" + opt.Keyword + "%'").Find(&us)
err = x.Limit(opt.Limit).Where("type=0").And("lower_name like ?", "%"+opt.Keyword+"%").Find(&us)
return us, err
}