lib/db.js
@@ -87,7 +87,7 @@ } async function getUsers(offset = 0, limit = 10, search = null) { log.info("++++++++++ get users", offset, limit, search) // log.info("++++++++++ get users", offset, limit, search) limit = Number(limit) || 10 offset = Number(offset) || 0 // TODO check args for SQL Injection