From d33f3df967e6c83f4484518d076b2da33acb6794 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Mon, 3 Sep 2007 16:55:00 +0000
Subject: - Patch #165160 by chx: restored access checking.

---
 includes/bootstrap.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'includes')

diff --git a/includes/bootstrap.inc b/includes/bootstrap.inc
index bcf94f7ea..023e9e97a 100644
--- a/includes/bootstrap.inc
+++ b/includes/bootstrap.inc
@@ -828,7 +828,7 @@ function drupal_is_denied($type, $mask) {
   // (allowed).
   // The use of ORDER BY / LIMIT is more efficient than "MAX(status) = 0"
   // in PostgreSQL <= 8.0.
-  return (bool) db_result(db_query_range("SELECT CASE WHEN status=1 THEN 0 ELSE 1 END FROM {access} WHERE type = '%s' AND LOWER(mask) LIKE LOWER('%s') ORDER BY status DESC", $type, $mask, 0, 1));
+  return (bool) db_result(db_query_range("SELECT CASE WHEN status=1 THEN 0 ELSE 1 END FROM {access} WHERE type = '%s' AND LOWER('%s') LIKE LOWER(mask) ORDER BY status DESC", $type, $mask, 0, 1));
 }
 
 /**
-- 
cgit v1.2.3