upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-02-18 18:28:50 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 14

fix(preview): Correctly insert preview version

Browse source 
Use createNamedParameter otherwise values are not correctly escapted.

Signed-off-by: Carl Schwan <carl.schwan@nextcloud.com>
This commit is contained in:
Carl Schwan 2025-12-17 18:23:53 +01:00
parent cc23025c2a
commit 06b6a5bc05
No known key found for this signature in database
GPG key ID: 02325448204E452A
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/private/Preview/Db/PreviewMapper.php
View file

@ -55,9 +55,9 @@ class PreviewMapper extends QBMapper {
$id = $this->snowflake->nextId();
$qb->insert(self::VERSION_TABLE_NAME)
->values([
'id' => $id,
'version' => $preview->getVersion(),
'file_id' => $preview->getFileId(),
'id' => $qb->createNamedParameter($id),
'version' => $qb->createNamedParameter($preview->getVersion(), IQueryBuilder::PARAM_STR),
'file_id' => $qb->createNamedParameter($preview->getFileId()),
])
->executeStatement();
$entity->setVersionId($id);