diff --git a/phpBB/admin/admin_permissions.php b/phpBB/admin/admin_permissions.php index 70c7e3206e..fe56f0f70a 100644 --- a/phpBB/admin/admin_permissions.php +++ b/phpBB/admin/admin_permissions.php @@ -269,7 +269,7 @@ if (!empty($forum_id) || !empty($group_id) || !empty($username) || { $sql = "SELECT user_id FROM " . USERS_TABLE . " - WHERE username = '$username'"; + WHERE username IN ('$username')"; $result = $db->sql_query($sql); if (!($row = $db->sql_fetchrow($result))) @@ -285,7 +285,7 @@ if (!empty($forum_id) || !empty($group_id) || !empty($username) || { $sql = "SELECT group_name FROM " . GROUPS_TABLE . " - WHERE group_id = $group_id"; + WHERE group_id IN ($group_id)"; $result = $db->sql_query($sql); if (!($row = $db->sql_fetchrow($result))) @@ -405,7 +405,7 @@ if (!empty($forum_id) || !empty($group_id) || !empty($username) || { $db->sql_freeresult($result); - $sql = ($_POST['type'] == 'group') ? "SELECT group_id AS id, group_name AS name FROM " . GROUPS_TABLE . " WHERE group_id IN ($where_sql) ORDER BY group_name ASC" : "SELECT user_id AS id, username AS name, user_founder FROM " . USERS_TABLE . " WHERE username IN ($where_sql) ORDER BY username, user_regdate ASC"; + $sql = ($_POST['type'] == 'group') ? "SELECT group_id AS id, group_name AS name FROM " . GROUPS_TABLE . " WHERE group_id IN ($where_sql) ORDER BY group_name ASC" : "SELECT user_id AS id, username AS name, user_founder FROM " . USERS_TABLE . " WHERE user_id IN ($where_sql) ORDER BY username, user_regdate ASC"; $result = $db->sql_query($sql); while ($row = $db->sql_fetchrow($result)) @@ -581,9 +581,9 @@ if (!empty($forum_id) || !empty($group_id) || !empty($username) ||