Info queries using package IDs were no longer working due to commit
c6d84b3a8df10c522d79c754d4f73cb2a352586f, which introduced a table join
in process_query(), thus making the "ID" column ambiguous. Fix this by
explicitly specifying the table to use. Fixes FS#25696.

Signed-off-by: Lukas Fleischer <[email protected]>
---
 web/lib/aurjson.class.php |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/web/lib/aurjson.class.php b/web/lib/aurjson.class.php
index 277c824..b596359 100644
--- a/web/lib/aurjson.class.php
+++ b/web/lib/aurjson.class.php
@@ -203,7 +203,7 @@ class AurJSON {
             // just using sprintf to coerce the pqd to an int
             // should handle sql injection issues, since sprintf will
             // bork if not an int, or convert the string to a number 0
-            $where_condition = "ID={$pqdata}";
+            $where_condition = "Packages.ID={$pqdata}";
         }
         else {
             $where_condition = sprintf("Name=\"%s\"",
-- 
1.7.6

Reply via email to