From 6c20c428a1c47cf55ee6d73409f841e20eadaabc Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Mon, 11 Jun 2007 07:46:05 +0000
Subject: - Patch #145646 by lyricnz: select fields more strictly.

---
 modules/block/block.module | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/block/block.module b/modules/block/block.module
index 21379b5d2..0de6aec17 100644
--- a/modules/block/block.module
+++ b/modules/block/block.module
@@ -141,7 +141,7 @@ function block_block($op = 'list', $delta = 0, $edit = array()) {
       break;
 
     case 'view':
-      $block = db_fetch_object(db_query('SELECT * FROM {boxes} WHERE bid = %d', $delta));
+      $block = db_fetch_object(db_query('SELECT body, format FROM {boxes} WHERE bid = %d', $delta));
       $data['content'] = check_markup($block->body, $block->format, FALSE);
       return $data;
   }
-- 
cgit v1.2.3