[BUGFIX] Only provide fields which do not break other backends

in2code-de · Mar 26, 2018 · 3fab8dc · 3fab8dc
1 parent 8a42ed1
commit 3fab8dc
Showing 1 changed file with 22 additions and 1 deletion.
diff --git a/Classes/UserRepository.php b/Classes/UserRepository.php
@@ -11,6 +11,27 @@ class UserRepository
      */
     protected $connection = null;
 
+    /**
+     * @var array
+     */
+    protected $fields = [
+        'tstamp',
+        'username',
+        'description',
+        'avatar',
+        'password',
+        'admin',
+        'disable',
+        'starttime',
+        'endtime',
+        'lang',
+        'email',
+        'crdate',
+        'realName',
+        'disableIPlock',
+        'deleted',
+    ];
+
     /**
      * BackendUserRepository constructor.
      *
@@ -49,6 +70,6 @@ public function getUserState($user)
     public function getUser($user)
     {
         $where = 'username = ' . $this->connection->fullQuoteStr($user, 'be_users');
-        return $this->connection->exec_SELECTgetSingleRow('*', 'be_users', $where);
+        return $this->connection->exec_SELECTgetSingleRow(implode(',', $this->fields), 'be_users', $where);
     }
 }