SECURITY: Fix variable usage in ApiQueryUserContributions
authorBrad Jorsch <bjorsch@wikimedia.org>
Fri, 23 Mar 2018 13:31:31 +0000 (09:31 -0400)
committerBrian Wolff <bawolff+wn@gmail.com>
Fri, 23 Mar 2018 14:27:43 +0000 (14:27 +0000)
commitccfca1fe64ae4c231fdb1b7de9089b1496dfcb8f
tree63b85a828a90389b9ee5deb130ec33bd83658045
parenta95af60e7f4b9bd7574acad39e3f618088bc2d75
SECURITY: Fix variable usage in ApiQueryUserContributions

$from was being used instead of $fromName in the handling for
ucuserprefix, causing broken SQL.

Bug: T190507
Change-Id: I0759637ea5f35853271167ca0aaaabd3b7ab69f9
includes/api/ApiQueryUserContributions.php