Skip to content

escaping quotes symbols in "_quote_identifier_part" #74

@msangel

Description

@msangel

Method "_quote_identifier_part" do basic escaping - it just wrap raw string by extra quote symbols in end and begining:
return $quote_character . $part . $quote_character;

this code can be broken by string , that already contain $quote_character inside.

Simplest solution will be - just dublicating $quote_character inside of string. In that case we will have valid syntax.

For more details see example with "Hello" on: http://dev.mysql.com/doc/refman/5.1/en/string-literals.html

This tested and work with mySql, but other databeses probably have same behavior.

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions