Page MenuHomePhorge

D25669.1736840001.diff
No OneTemporary

D25669.1736840001.diff

diff --git a/src/applications/maniphest/query/ManiphestTaskQuery.php b/src/applications/maniphest/query/ManiphestTaskQuery.php
--- a/src/applications/maniphest/query/ManiphestTaskQuery.php
+++ b/src/applications/maniphest/query/ManiphestTaskQuery.php
@@ -358,6 +358,10 @@
$where[] = $this->buildOwnerWhereClause($conn);
if ($this->taskIDs !== null) {
+ if (!ctype_digit(implode('', $this->taskIDs))) {
+ throw new PhutilSearchQueryCompilerSyntaxException(
+ pht('Task IDs must be integer numbers.'));
+ }
$where[] = qsprintf(
$conn,
'task.id in (%Ld)',

File Metadata

Mime Type
text/plain
Expires
Tue, Jan 14, 07:33 (4 d, 10 h ago)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
1113976
Default Alt Text
D25669.1736840001.diff (617 B)

Event Timeline