*** mod_auth_mysql.c	Sun Jun 10 12:49:56 2007
--- mod_auth_mysql-3.0.0/mod_auth_mysql.c	Wed Jun 22 12:17:45 2005
***************
*** 1120,1133 ****
    if (m->mysqlGroupUserNameField == NULL)
      m->mysqlGroupUserNameField = m->mysqlNameField;
    if (m->mysqlGroupCondition) {
!     SNPRINTF(query,sizeof(query)-1,"SELECT %s FROM %s WHERE (%s='%s' OR %s LIKE '%s,%%' OR %s LIKE '%%,%s' OR %s LIKE '%%,%s,%%') AND %s",
! 	      m->mysqlGroupField, m->mysqlgrptable, m->mysqlGroupUserNameField, sql_safe_user,
! 		  m->mysqlGroupUserNameField, sql_safe_user, m->mysqlGroupUserNameField, sql_safe_user,
  	      m->mysqlGroupUserNameField, sql_safe_user, str_format(r, m->mysqlGroupCondition));
    } else {
!     SNPRINTF(query,sizeof(query)-1,"SELECT %s FROM %s WHERE %s='%s' OR %s LIKE '%s,%%' OR %s LIKE '%%,%s' OR %s LIKE '%%,%s,%%'",
! 	      m->mysqlGroupField, m->mysqlgrptable, m->mysqlGroupUserNameField, sql_safe_user,
! 		  m->mysqlGroupUserNameField, sql_safe_user, m->mysqlGroupUserNameField, sql_safe_user,
  	      m->mysqlGroupUserNameField, sql_safe_user);
    }
    if (mysql_query(connection.handle, query) != 0) {
--- 1120,1131 ----
    if (m->mysqlGroupUserNameField == NULL)
      m->mysqlGroupUserNameField = m->mysqlNameField;
    if (m->mysqlGroupCondition) {
!     SNPRINTF(query,sizeof(query)-1,"SELECT %s FROM %s WHERE %s='%s' AND %s",
! 	      m->mysqlGroupField, m->mysqlgrptable,
  	      m->mysqlGroupUserNameField, sql_safe_user, str_format(r, m->mysqlGroupCondition));
    } else {
!     SNPRINTF(query,sizeof(query)-1,"SELECT %s FROM %s WHERE %s='%s'",
! 	      m->mysqlGroupField, m->mysqlgrptable,
  	      m->mysqlGroupUserNameField, sql_safe_user);
    }
    if (mysql_query(connection.handle, query) != 0) {