gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add quotes to only simple string value, if starts with '0x' don't

Browse Source 
Signed-off-by: faissaloux <fwahabali@gmail.com>
This commit is contained in:
faissaloux 2025-01-15 23:49:01 +01:00
parent f8cf6a7a8f
commit 4d25a41b89
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
libraries/classes/Table/Search.php
View File

@ -167,7 +167,10 @@ final class Search
// strings to numbers and numbers to strings as necessary
// during the comparison
if (
preg_match('@char|binary|blob|text|set|date|time|year|uuid@i', $types)
(
preg_match('@char|binary|blob|text|set|date|time|year|uuid@i', $types)
&& !str_starts_with($criteriaValues, '0x')
)
|| mb_strpos(' ' . $func_type, 'LIKE')
) {
$quot = '\'';
@ -197,8 +200,6 @@ final class Search
&& $func_type !== 'BETWEEN'
&& $func_type !== 'NOT BETWEEN'
) {
$quot = $names === 'varbinary' ? '' : $quot;
return $backquoted_name . ' ' . $func_type . ' ' . $quot
. $this->dbi->escapeString($criteriaValues) . $quot;
}