You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Method "_quote_identifier_part" do basic escaping - it just wrap raw string by extra quote symbols in end and begining:
return $quote_character . $part . $quote_character;
this code can be broken by string , that already contain $quote_character inside.
Simplest solution will be - just dublicating $quote_character inside of string. In that case we will have valid syntax.
Method "_quote_identifier_part" do basic escaping - it just wrap raw string by extra quote symbols in end and begining:
return $quote_character . $part . $quote_character;
this code can be broken by string , that already contain $quote_character inside.
Simplest solution will be - just dublicating $quote_character inside of string. In that case we will have valid syntax.
For more details see example with "Hello" on: http://dev.mysql.com/doc/refman/5.1/en/string-literals.html
This tested and work with mySql, but other databeses probably have same behavior.
The text was updated successfully, but these errors were encountered: