-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 4.0.0-a1, 3.3, 3.2.8
-
Fix Version/s: 3.2.9-RC1
-
Component/s: Authentication, Login
-
Labels:None
https://www.phpbb.com/community/viewtopic.php?f=641&t=2524651
The oauth provider id can be an integer and when the WHERE clause is build with sql_build_array, the provider is not quoted and causes a SQL error.
Suggested fix: enforce data types in the $data array with (string).