Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-18969

Make $db->escapeString() escape underscores on demand

        Details

        • Type: Improvement Improvement
        • Status: Open
        • Priority: High High
        • Resolution: Unresolved
        • Affects Version/s: 4.6.0
        • Fix Version/s: Future
        • Component/s: Database related
        • Labels:
          None

          Description

          $db->escapeString() does not escape underscores (which are considered as wildcards in MySQL), but it should at least on demand.

          Consider adding a flag parameter to this method.

            Activity

            Hide
            Permalink
            Gaetano Giunta added a comment -

            Not sure if this is the correct function to put the escaping...

            but if it is, it will have to be not only underscores, but also * and ? I guess

            Show
            Gaetano Giunta added a comment - Not sure if this is the correct function to put the escaping... but if it is, it will have to be not only underscores, but also * and ? I guess

              People

              • Assignee:
                Jérôme Vieilledent
                Reporter:
                Jérôme Vieilledent
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated: