Changeset 3399:cafdaa2542dc for inc/core

Timestamp:

11/09/16 18:31:31 (9 years ago)

Author:

Jean-Christian Denis

Branch:

default

Message:

Fix crash of non-superadmin authentication on removed blog

File:

• inc/core/class.dc.auth.php (modified) (1 diff)

inc/core/class.dc.auth.php

@@ -438 +438 @@
                else
                {
-                    $strReq = 'SELECT blog_id '.
-                              'FROM '.$this->perm_table.' '.
+                    $strReq = 'SELECT P.blog_id '.
+                              'FROM '.$this->perm_table.' P, '.$this->blog_table.' B '.
                               "WHERE user_id = '".$this->con->escape($this->user_id)."' ".
+                              "AND P.blog_id = B.blog_id ".
                               "AND (permissions LIKE '%|usage|%' OR permissions LIKE '%|admin|%' OR permissions LIKE '%|contentadmin|%') ".
-                              'ORDER BY blog_id ASC '.
+                              "AND blog_status >= 0 ".
+                              'ORDER BY P.blog_id ASC '.
                               $this->con->limit(1);
                }