From e01f5989afa78800bb75a4ac3bc3a8c01b95072f Mon Sep 17 00:00:00 2001 From: mark_story Date: Wed, 28 Dec 2016 23:18:30 -0500 Subject: [PATCH] Use array conditions for joins. Use array style conditions instead of using lower-level DboSource API methods to create safe SQL. Refs #9927 --- lib/Cake/Model/AclNode.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Cake/Model/AclNode.php b/lib/Cake/Model/AclNode.php index a689ffe0e..b11d84988 100644 --- a/lib/Cake/Model/AclNode.php +++ b/lib/Cake/Model/AclNode.php @@ -102,7 +102,7 @@ class AclNode extends Model { 'alias' => "{$type}{$i}", 'type' => 'INNER', 'conditions' => array( - $db->name("{$type}{$i}.alias") . ' = ' . $db->value($alias, 'string') + "{$type}{$i}.alias" => $alias ) );