Przeglądaj źródła

fix issue 1481. correctly escape api_key.key column name

'key' is a reserved word in mysql. So when building a query,
the api-key.key column name needs to be escaped
woodsaj 11 lat temu
rodzic
commit
55ba8ad0c4
1 zmienionych plików z 1 dodań i 1 usunięć
  1. 1 1
      pkg/services/sqlstore/apikey.go

+ 1 - 1
pkg/services/sqlstore/apikey.go

@@ -66,7 +66,7 @@ func UpdateApiKey(cmd *m.UpdateApiKeyCommand) error {
 
 func GetApiKeyByKey(query *m.GetApiKeyByKeyQuery) error {
 	var apikey m.ApiKey
-	has, err := x.Where("key=?", query.Key).Get(&apikey)
+	has, err := x.Where("`key`=?", query.Key).Get(&apikey)
 
 	if err != nil {
 		return err