From 42cf50ee7521bd751f4d0f0798276e548bb83fee Mon Sep 17 00:00:00 2001 From: Logan Hunt Date: Wed, 30 Mar 2022 22:15:20 -0600 Subject: Working --- server/providers/services/chat_room.service.ts | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'server/providers/services/chat_room.service.ts') diff --git a/server/providers/services/chat_room.service.ts b/server/providers/services/chat_room.service.ts index a6af023..ed75ba4 100644 --- a/server/providers/services/chat_room.service.ts +++ b/server/providers/services/chat_room.service.ts @@ -18,9 +18,10 @@ export class ChatRoomService { return this.chatRoomRepository.find(); } - near({ lat, lng }: { lat: number; lng: number }) { + nearOrUserOwns({ lat, lng, userId }: { lat: number; lng: number; userId: number }) { + // SQL injection maybe? return this.chatRoomRepository.query( - `SELECT * FROM chat_room WHERE calculate_distance(latitude, longitude, ${lat}, ${lng}, 'M') < 5`, + `SELECT * FROM chat_room WHERE calculate_distance(latitude, longitude, ${lat}, ${lng}, 'M') < 5 OR "userId" = ${userId}`, ); } -- cgit v1.2.3-70-g09d2