From: Steve Clay <steve@mrclay.org>
Date: Tue, 17 Apr 2012 04:13:46 +0000 (-0400)
Subject: Fixes #4432: Do not escape ORDER BY/GROUP BY clauses in elgg_get_entities
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=76978dd5620b5664e68a3a4068d5bd07771fe7ea;p=lorea%2Felgg.git

Fixes #4432: Do not escape ORDER BY/GROUP BY clauses in elgg_get_entities
---

diff --git a/engine/lib/entities.php b/engine/lib/entities.php
index 4875b2c2f..7fe913888 100644
--- a/engine/lib/entities.php
+++ b/engine/lib/entities.php
@@ -915,11 +915,11 @@ function elgg_get_entities(array $options = array()) {
 	}
 
 	if (!$options['count']) {
-		if ($options['group_by'] = sanitise_string($options['group_by'])) {
+		if ($options['group_by']) {
 			$query .= " GROUP BY {$options['group_by']}";
 		}
 
-		if ($options['order_by'] = sanitise_string($options['order_by'])) {
+		if ($options['order_by']) {
 			$query .= " ORDER BY {$options['order_by']}";
 		}