From 4c1fc0b6d69b992af232a37890d69c20dea78e98 Mon Sep 17 00:00:00 2001 From: Andrew Nicols Date: Wed, 7 Nov 2018 07:51:27 +0800 Subject: [PATCH] MDL-62589 dataprivacy: Correct not in sql --- admin/tool/dataprivacy/classes/api.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/admin/tool/dataprivacy/classes/api.php b/admin/tool/dataprivacy/classes/api.php index 10889a915ec..a17d38828e0 100644 --- a/admin/tool/dataprivacy/classes/api.php +++ b/admin/tool/dataprivacy/classes/api.php @@ -437,8 +437,8 @@ class api { self::DATAREQUEST_STATUS_EXPIRED, self::DATAREQUEST_STATUS_DELETED, ]; - list($insql, $inparams) = $DB->get_in_or_equal($nonpendingstatuses, SQL_PARAMS_NAMED); - $select = 'type = :type AND userid = :userid AND status NOT ' . $insql; + list($insql, $inparams) = $DB->get_in_or_equal($nonpendingstatuses, SQL_PARAMS_NAMED, 'st', false); + $select = "type = :type AND userid = :userid AND status {$insql}"; $params = array_merge([ 'type' => $type, 'userid' => $userid