diff --git a/ext/comment/main.php b/ext/comment/main.php index 3f889cd6..0c364d57 100644 --- a/ext/comment/main.php +++ b/ext/comment/main.php @@ -374,9 +374,10 @@ class CommentList extends SimpleExtension { $window = int_escape($config->get_int('comment_window')); $max = int_escape($config->get_int('comment_limit')); + // window doesn't work as an SQL param because it's inside quotes >_< $result = $database->get_all("SELECT * FROM comments WHERE owner_ip = :remote_ip ". - "AND posted > date_sub(now(), interval :window minute)", - Array("remote_ip"=>$_SERVER['REMOTE_ADDR'], "window"=>$window)); + "AND posted > now() - interval '$window minute'", + Array("remote_ip"=>$_SERVER['REMOTE_ADDR'])); return (count($result) >= $max); }