From 98305e7dee01dc31b59813d54d9740b64b64b24b Mon Sep 17 00:00:00 2001 From: mykola2312 Date: Fri, 8 Mar 2024 08:42:12 +0200 Subject: [PATCH] fix bug related to chat permission requests when approve/decline commands may targeted wrong chats because of wrong sql query --- src/bot/request_chat.rs | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/bot/request_chat.rs b/src/bot/request_chat.rs index cf40436..49ec9f4 100644 --- a/src/bot/request_chat.rs +++ b/src/bot/request_chat.rs @@ -110,12 +110,11 @@ pub async fn cmd_approve_chat(bot: Bot, msg: Message, id: String, db: DbPool) -> } // get request - // BUG: FIX SQL let res: Result = sqlx::query_as( r#"SELECT "request_chat".id AS request_id, "request_chat".message, "chat".* FROM "request_chat" INNER JOIN "chat" ON "request_chat".requested_for = "chat".id - WHERE "request_chat".is_approved = false + WHERE "request_chat".id = $1 AND "request_chat".is_approved = false LIMIT 1;"#, ) .bind(id) @@ -171,7 +170,7 @@ pub async fn cmd_decline_chat(bot: Bot, msg: Message, id: String, db: DbPool) -> r#"SELECT "request_chat".id AS request_id, "request_chat".message, "chat".* FROM "request_chat" INNER JOIN "chat" ON "request_chat".requested_for = "chat".id - WHERE "request_chat".is_approved = false + WHERE "request_chat".id = $1 AND "request_chat".is_approved = false LIMIT 1;"#, ) .bind(id)