Add Mysql escaping

2014-10-08 21:49:25 -04:00
parent 0d4e12d6e5
commit a8418afdeb
2 changed files with 6 additions and 2 deletions
--- a/vendor/PicoDb/Table.php
+++ b/vendor/PicoDb/Table.php
@@ -173,6 +173,10 @@ class Table

    public function buildSelectQuery()
    {
+        foreach ($this->columns as $key => $value) {
+            $this->columns[$key] = $this->db->escapeIdentifier($value);
+        }
+
        return sprintf(
            'SELECT %s %s FROM %s %s %s %s %s %s %s',
            $this->distinct ? 'DISTINCT' : '',