forked from casdoor/casdoor
fix: improve value in GetSession()
This commit is contained in:
@@ -349,7 +349,7 @@ func GetPaginationGroupUsers(groupId string, offset, limit int, field, value, so
|
||||
session = session.And(fmt.Sprintf("%s.%s like ?", prefixedUserTable, util.CamelToSnakeCase(field)), "%"+value+"%")
|
||||
}
|
||||
|
||||
if sortField == "" || sortOrder == "" {
|
||||
if sortField == "" || sortOrder == "" || !util.FilterField(sortField) {
|
||||
sortField = "created_time"
|
||||
}
|
||||
|
||||
|
||||
@@ -35,7 +35,7 @@ func GetSession(owner string, offset, limit int, field, value, sortField, sortOr
|
||||
session = session.And(fmt.Sprintf("%s like ?", util.SnakeString(field)), fmt.Sprintf("%%%s%%", value))
|
||||
}
|
||||
}
|
||||
if sortField == "" || sortOrder == "" {
|
||||
if sortField == "" || sortOrder == "" || !util.FilterField(sortField) {
|
||||
sortField = "created_time"
|
||||
}
|
||||
if sortOrder == "ascend" {
|
||||
@@ -66,7 +66,7 @@ func GetSessionForUser(owner string, offset, limit int, field, value, sortField,
|
||||
session = session.And(fmt.Sprintf("%s like ?", util.SnakeString(field)), fmt.Sprintf("%%%s%%", value))
|
||||
}
|
||||
}
|
||||
if sortField == "" || sortOrder == "" {
|
||||
if sortField == "" || sortOrder == "" || !util.FilterField(sortField) {
|
||||
sortField = "created_time"
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user