Skip to content
This repository has been archived by the owner on May 16, 2018. It is now read-only.

Db\Statement->_parseParameters() bad handling of commented single quote #742

Closed
lukevi opened this issue Jul 25, 2017 · 1 comment
Closed
Labels

Comments

@lukevi
Copy link

lukevi commented Jul 25, 2017

/* @var $s \Zend_Db_Statement /
$s->prepare("/
/ SELECT ':0'"); // fine
$s->prepare(""/
'*/ SELECT ':0'"); // throws Zend_Db_Statement_Exception, "Invalid bind-variable name ':0'"

Not sure whether this is the job of _stripQuoted or _parseParameters.

@froschdesign
Copy link
Member

We are sorry, but ZF1 reaches its End of Life (EOL).

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants