From 9b2fcadeef75d9e6256c0258d39751da71847d66 Mon Sep 17 00:00:00 2001
From: Filip Navara <filip.navara@gmail.com>
Date: Sun, 21 Oct 2018 00:19:21 +0200
Subject: [PATCH] Fix SQL quoting (#5117)

`show` is keyword in MySQL and has to be quoted to reference a column name. Use grave accents (ASCII code 96) for quoting to match rest of the source code. It's non-standard SQL, but it's supported by SQLite and MySQL.

Signed-off-by: Filip Navara <navara@emclient.com>
---
 models/user_openid.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/models/user_openid.go b/models/user_openid.go
index 5255b32500..49edc1db21 100644
--- a/models/user_openid.go
+++ b/models/user_openid.go
@@ -93,7 +93,7 @@ func DeleteUserOpenID(openid *UserOpenID) (err error) {
 
 // ToggleUserOpenIDVisibility toggles visibility of an openid address of given user.
 func ToggleUserOpenIDVisibility(id int64) (err error) {
-	_, err = x.Exec("update user_open_id set show = not show where id = ?", id)
+	_, err = x.Exec("update `user_open_id` set `show` = not `show` where `id` = ?", id)
 	return err
 }