diff options
Diffstat (limited to 'server/providers/services/chat_room.service.ts')
-rw-r--r-- | server/providers/services/chat_room.service.ts | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/server/providers/services/chat_room.service.ts b/server/providers/services/chat_room.service.ts index a6af023..ed75ba4 100644 --- a/server/providers/services/chat_room.service.ts +++ b/server/providers/services/chat_room.service.ts @@ -18,9 +18,10 @@ export class ChatRoomService { return this.chatRoomRepository.find(); } - near({ lat, lng }: { lat: number; lng: number }) { + nearOrUserOwns({ lat, lng, userId }: { lat: number; lng: number; userId: number }) { + // SQL injection maybe? return this.chatRoomRepository.query( - `SELECT * FROM chat_room WHERE calculate_distance(latitude, longitude, ${lat}, ${lng}, 'M') < 5`, + `SELECT * FROM chat_room WHERE calculate_distance(latitude, longitude, ${lat}, ${lng}, 'M') < 5 OR "userId" = ${userId}`, ); } |