Project

General

Profile

Actions

Bug #5869

closed

Table names not properly escaped when building form save queries

Added by Nicola Chiapolini about 6 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
High
Assignee:
Carsten Rose
Target version:
Start date:
25.04.2018
Due date:
% Done:

100%

Estimated time:
Discuss:
Prio Planung:
Vote:

Description

I had a table containing '-' characters in its name. QFQ forms on this table fail to save as the table name is not escaped:

INSERT INTO phd_committee-members ( `phd_student`, `fullname` ) VALUES ( ?, ? )

Actions

Also available in: Atom PDF