Make sure that clients can't access buffers belonging to other users

[quassel.git] / src / core / SQL / SQLite / 17 / select_buffer_by_id.sql

diff --git a/src/core/SQL/SQLite/17/select_buffer_by_id.sql b/src/core/SQL/SQLite/17/select_buffer_by_id.sql
index 09f202e..6bd35f0 100644 (file)
--- a/src/core/SQL/SQLite/17/select_buffer_by_id.sql
+++ b/src/core/SQL/SQLite/17/select_buffer_by_id.sql
@@ -1,3 +1,3 @@
 SELECT bufferid, networkid, buffertype, groupid, buffername
 FROM buffer
 SELECT bufferid, networkid, buffertype, groupid, buffername
 FROM buffer

-WHERE bufferid = :bufferid
+WHERE bufferid = :bufferid AND userid = :userid