From 9080a0e778616bdd7e1102eb5b81989f2f318341 Mon Sep 17 00:00:00 2001 From: mrgoldy Date: Tue, 24 Mar 2020 00:28:00 +0100 Subject: [PATCH] [ticket/13867] Force data type in profile fields manager PHPBB3-13867 --- phpBB/phpbb/profilefields/manager.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/phpBB/phpbb/profilefields/manager.php b/phpBB/phpbb/profilefields/manager.php index e89956581e..cfa837cd91 100644 --- a/phpBB/phpbb/profilefields/manager.php +++ b/phpBB/phpbb/profilefields/manager.php @@ -364,9 +364,11 @@ class manager return []; } + $user_ids = (array) $user_ids; + $sql = 'SELECT * FROM ' . $this->fields_data_table . ' - WHERE ' . $this->db->sql_in_set('user_id', array_map('intval', (array) $user_ids)); + WHERE ' . $this->db->sql_in_set('user_id', array_map('intval', $user_ids)); $result = $this->db->sql_query($sql); $rowset = $this->db->sql_fetchrowset($result); $this->db->sql_freeresult($result);