From 4f4b6e546900cbd913b930bbe025c0ed8fa8e0ba Mon Sep 17 00:00:00 2001
From: Gerald Michelant <gerald.michelant@gmail.com>
Date: Wed, 2 Jan 2019 10:04:45 -0500
Subject: [PATCH] changed method to inject variable to login

---
 src/graphql-schema.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/graphql-schema.js b/src/graphql-schema.js
index 830fda193..eabde7a6b 100644
--- a/src/graphql-schema.js
+++ b/src/graphql-schema.js
@@ -97,8 +97,8 @@ export const resolvers = {
       // }
       const session = driver.session()
       return session.run(
-        'MATCH (user:User {email: "' + email + '"}) ' +
-        'RETURN user {.id, .slug, .name, .avatar, .email, .password, .role} as user LIMIT 1')
+        'MATCH (user:User {email: $userEmail}) ' +
+        'RETURN user {.id, .slug, .name, .avatar, .email, .password, .role} as user LIMIT 1', { userEmail: email })
         .then(async (result) => {
           session.close()
           const [currentUser] = await result.records.map(function (record) {