You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"Special bindings" (order by, limit, group by, offset) can not be injected by PDO natively, so they must be injected into the SQL string. Currently the implementation does basic escaping of characters, but it would be very neat to parse the different special bindings and escape each one properly according to the spec.
"Special bindings" (order by, limit, group by, offset) can not be injected by PDO natively, so they must be injected into the SQL string. Currently the implementation does basic escaping of characters, but it would be very neat to parse the different special bindings and escape each one properly according to the spec.
There is already placeholder code for this here:
Database/src/Query/SqlQuery.php
Lines 159 to 175 in 1c21db6
The text was updated successfully, but these errors were encountered: