diff options
| author | Mark Haines <mark.haines@matrix.org> | 2016-07-05 10:39:13 +0100 |
|---|---|---|
| committer | Mark Haines <mark.haines@matrix.org> | 2016-07-05 10:39:13 +0100 |
| commit | d44d11d864714d4d99953bdae6625973519f120f (patch) | |
| tree | 2afee741266f4c3c3927306a2a358bfed3fd1014 /synapse/storage/event_push_actions.py | |
| parent | Use different SQL for postgres and sqlite3 for when using multicolumn indexes (diff) | |
| download | synapse-d44d11d864714d4d99953bdae6625973519f120f.tar.xz | |
Use true/false for boolean parameter inclusive to avoid potential for sqli, and possibly make the code clearer
Diffstat (limited to 'synapse/storage/event_push_actions.py')
| -rw-r--r-- | synapse/storage/event_push_actions.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/synapse/storage/event_push_actions.py b/synapse/storage/event_push_actions.py index e3e2e8083e..3d93285f84 100644 --- a/synapse/storage/event_push_actions.py +++ b/synapse/storage/event_push_actions.py @@ -86,7 +86,7 @@ class EventPushActionsStore(SQLBaseStore): " user_id = ?" " AND room_id = ?" " AND %s" - ) % (lower_bound(token, self.database_engine, inclusive=""),) + ) % (lower_bound(token, self.database_engine, inclusive=False),) txn.execute(sql, (user_id, room_id)) row = txn.fetchone() |