Skip to content

Fix tmp_password check if the password passed is a number

Andrew Ruthven requested to merge fix-tmp_password-number into master

Ensure we cast the password as text.

2024-01-21 12:39:55 NZDT davical_app - davical ERROR:  operator does not exist: text = integer at character 68
2024-01-21 12:39:55 NZDT davical_app - davical HINT:  No operator matches the given name and argument types. You might need to add explicit type casts.
2024-01-21 12:39:55 NZDT davical_app - davical STATEMENT:  SELECT 1 AS ok FROM tmp_password WHERE user_no = 1017 AND password = 12345 AND valid_until > current_timestamp

Reported on https://gitlab.com/davical-project/davical/-/issues/305

Edited by Andrew Ruthven

Merge request reports