fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ad label in exception

Browse Source
This commit is contained in:
Ronald Quenta
2017-08-08 14:05:34 -04:00
parent 5811ea3231
commit 143348acd0
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
workflow/engine/src/ProcessMaker/BusinessModel/User.php
View File

@@ -1220,7 +1220,7 @@ class User
if (!is_null($sortField) && trim($sortField) != "") {
//SQL Injection via 'sortField' parameter
if (!in_array($sortField, UsersPeer::getFieldNames(BasePeer::TYPE_FIELDNAME))) {
throw new Exception('Invalid sortField parameter');
throw new Exception(G::LoadTranslation('ID_INVALID_VALUE_FOR', array('$sortField')));
}
$sortField = strtoupper($sortField);
@@ -1598,7 +1598,7 @@ class User
if ($sort != '') {
//SQL Injection via 'sort' parameter
if (!in_array($sort, UsersPeer::getFieldNames(BasePeer::TYPE_FIELDNAME))) {
throw new Exception('Invalid sort parameter');
throw new Exception(G::LoadTranslation('ID_INVALID_VALUE_FOR', array('$sort')));
}
if ($dir == 'ASC') {
$oCriteria->addAscendingOrderByColumn($sort);