Actions
Bug #17315
closedAS _encrypt=(...) does not encrypt data or truncates sql statement
Start date:
17.11.2023
Due date:
% Done:
0%
Estimated time:
Discuss:
Prio Planung:
No
Vote:
Description
Observed behavior
The following command does not encrypt data:
10.sql=SELECT 'Hello world!' AS '_encrypt=AES-128'
The following command does not print 'end':
10.sql=SELECT 'Hello world!' AS _encrypt=AES-128, 'end'
The following command raises a DB exception:
10.sql=SELECT 'Hello world AS _encrypt=AES-128'
Reason
For the first behavior:- column names are parsed in
Report::splitColumnNames
and searched for=
character, but the name is tested againstencrypt
instead of_encrypt
- Inside
Database::prepareExecute
the statement is split atAS _encrypt=
and everything that follows is forgotten.
Actions