| | |
| | | |
| | | async function getUserByLogin (login) { |
| | | const sel = `usr_id, login, firstname, lastname, gender, email, institution, street, city, zipcode, country, department, active` |
| | | // TODO user defined fields |
| | | // TODO check args for SQL Injection |
| | | |
| | | const pool = await poolP |
| | | const [results, fields] = await pool.query( |
| | | `SELECT ${sel} |
| | | FROM ${database}.usr_data AS ud |
| | | WHERE login = '${login}' |
| | | AND login REGEXP '^[0-9]+$'` |
| | | WHERE login = '${login}'` |
| | | ) |
| | | return joinUDF(results[0]) |
| | | } |
| | | |
| | | async function getUserByUserId (userId) { |
| | | const sel = `usr_id, login, firstname, lastname, gender, email, institution, street, city, zipcode, country, department, active` |
| | | // TODO user defined fields |
| | | // TODO check args for SQL Injection |
| | | |
| | | const pool = await poolP |
| | | const [results, fields] = await pool.query( |
| | | `SELECT ${sel} |
| | | FROM ${database}.usr_data AS ud |
| | | WHERE usr_id = '${userId}' |
| | | AND login REGEXP '^[0-9]+$'` |
| | | WHERE usr_id = '${userId}'` |
| | | ) |
| | | return joinUDF(results[0]) |
| | | } |