QFQ

Observed behavior

The following command does not encrypt data:

10.sql=SELECT 'Hello world!' AS '_encrypt=AES-128'

The following command does not print 'end':

10.sql=SELECT 'Hello world!' AS _encrypt=AES-128, 'end'

The following command raises a DB exception:

10.sql=SELECT 'Hello world AS _encrypt=AES-128'

Reason

For the first behavior:

• column names are parsed in Report::splitColumnNames and searched for = character, but the name is tested against encrypt instead of _encrypt

For the second and third behavior:

• Inside Database::prepareExecute the statement is split at AS _encrypt= and everything that follows is forgotten.