fix(issue): possible SQL error

Signed-off-by: Thierry Bugier <tbugier@teclib.com>
pluginsGLPI · Jul 3, 2020 · 0688d13 · 0688d13
1 parent 3f1c262
commit 0688d13
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/hook.php b/hook.php
@@ -140,9 +140,13 @@ function plugin_formcreator_addDefaultWhere($itemtype) {
    switch ($itemtype) {
       case PluginFormcreatorIssue::class:
          $condition = Search::addDefaultWhere(Ticket::class);
-         $condition = str_replace('`glpi_tickets`', '`glpi_plugin_formcreator_issues`', $condition);
-         $condition = str_replace('`users_id_recipient`', '`requester_id`', $condition);
-         $condition = "($condition OR `glpi_plugin_formcreator_issues`.`users_id_validator` = '" . Session::getLoginUserID() . "')";
+         if ($condition == '') {
+            $condition = "(`glpi_plugin_formcreator_issues`.`users_id_validator` = '" . Session::getLoginUserID() . "')";
+         } else {
+            $condition = str_replace('`glpi_tickets`', '`glpi_plugin_formcreator_issues`', $condition);
+            $condition = str_replace('`users_id_recipient`', '`requester_id`', $condition);
+            $condition = "($condition OR `glpi_plugin_formcreator_issues`.`users_id_validator` = '" . Session::getLoginUserID() . "')";
+         }
          break;
 
       case PluginFormcreatorFormAnswer::class: