MDL-53169 database: use bound empty strings for cross-db

This commit is contained in:
Eloy Lafuente (stronk7) 2017-09-21 19:27:59 +02:00
parent 0e57965154
commit 7ab0993265

View File

@ -658,7 +658,8 @@ function enrol_get_my_courses($fields = null, $sort = 'visible DESC,sortorder AS
$courseidsql .= "
SELECT DISTINCT e.courseid
FROM {enrol} e
WHERE e.enrol = 'guest' AND e.password = '' AND e.status = :enabled2";
WHERE e.enrol = 'guest' AND e.password = :emptypass AND e.status = :enabled2";
$params['emptypass'] = '';
$params['enabled2'] = ENROL_INSTANCE_ENABLED;
// Include courses where the current user is currently using guest access (may include