[feature/attach-dl] Fixed the logic in an sql statement

PHPBB3-11042
This commit is contained in:
Fyorl 2012-08-15 06:08:18 +08:00
parent f6e8d938cb
commit 5827250a94

View file

@ -690,8 +690,10 @@ function phpbb_download_check_pm_auth($db, $user_id, $msg_id)
$sql = 'SELECT user_id, author_id
FROM ' . PRIVMSGS_TO_TABLE . '
WHERE msg_id = ' . (int) $msg_id . '
AND user_id = ' . (int) $user_id . '
OR author_id = ' . (int) $user_id;
AND (
user_id = ' . (int) $user_id . '
OR author_id = ' . (int) $user_id . '
)';
$result = $db->sql_query_limit($sql, 1);
$allowed = $db->sql_fetchrow($result);
$db->sql_freeresult($result);