1
0
mirror of https://github.com/dg/dibi.git synced 2025-08-09 23:56:58 +02:00

quoted identifiers security fix

This commit is contained in:
David Grudl
2008-09-15 23:58:03 +00:00
parent 8c4211d5be
commit 9b84459f09
7 changed files with 13 additions and 2 deletions

View File

@@ -218,7 +218,7 @@ class DibiSqliteDriver extends DibiObject implements IDibiDriver
return "'" . sqlite_escape_string($value) . "'";
case dibi::IDENTIFIER:
return '[' . str_replace('.', '].[', $value) . ']';
return '[' . str_replace('.', '].[', strtr($value, '[]', ' ')) . ']';
case dibi::FIELD_BOOL:
return $value ? 1 : 0;