mirror of
https://github.com/dg/dibi.git
synced 2025-08-21 05:11:49 +02:00
quoted identifiers security fix
This commit is contained in:
@@ -215,6 +215,7 @@ class DibiOdbcDriver extends DibiObject implements IDibiDriver
|
||||
return "'" . str_replace("'", "''", $value) . "'";
|
||||
|
||||
case dibi::IDENTIFIER:
|
||||
$value = str_replace(array('[', ']'), array('[[', ']]'), $value);
|
||||
return '[' . str_replace('.', '].[', $value) . ']';
|
||||
|
||||
case dibi::FIELD_BOOL:
|
||||
|
Reference in New Issue
Block a user