AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add Mysql escaping

Browse Source
This commit is contained in:
Frédéric Guillot
2014-10-08 21:49:25 -04:00
parent 0d4e12d6e5
commit a8418afdeb
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Schema/Mysql.php
View File

@@ -22,8 +22,8 @@ function version_29($pdo)
{ {
$pdo->exec(" $pdo->exec("
CREATE TABLE settings ( CREATE TABLE settings (
option VARCHAR(100) PRIMARY KEY, `option` VARCHAR(100) PRIMARY KEY,
value VARCHAR(255) DEFAULT '' `value` VARCHAR(255) DEFAULT ''
) )
"); ");

4
vendor/PicoDb/Table.php vendored
View File

@@ -173,6 +173,10 @@ class Table
public function buildSelectQuery() public function buildSelectQuery()
{ {
foreach ($this->columns as $key => $value) {
$this->columns[$key] = $this->db->escapeIdentifier($value);
}
return sprintf( return sprintf(
'SELECT %s %s FROM %s %s %s %s %s %s %s', 'SELECT %s %s FROM %s %s %s %s %s %s %s',
$this->distinct ? 'DISTINCT' : '', $this->distinct ? 'DISTINCT' : '',