lib/db.js
@@ -42,6 +42,7 @@ async function getUsers (offset = 0, limit = 10) { limit = Number(limit) || 10 offset = Number(offset) || 0 const sel = `usr_id, login, firstname, lastname, gender, email, institution, street, city, zipcode, country, department, active` // TODO user defined fields // TODO check args for SQL Injection