gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace escapeString with quoteString

Browse Source 
Signed-off-by: Kamil Tekiela <tekiela246@gmail.com>
This commit is contained in:
Kamil Tekiela 2023-04-21 20:50:19 +01:00
parent bfe1f4facf
commit 9a8fec903f
2 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libraries/classes/InsertEdit.php
View File

@ -1272,8 +1272,7 @@ class InsertEdit
|| in_array($editField->function, $this->getGisFromWKBFunctions())
) {
preg_match('/^(\'?)(.*?)\1(?:,(\d+))?$/', $editField->value, $matches);
$escapedParams = "'" . $this->dbi->escapeString($matches[2])
. (isset($matches[3]) ? "'," . $matches[3] : "'");
$escapedParams = $this->dbi->quoteString($matches[2]) . (isset($matches[3]) ? ',' . $matches[3] : '');
return $editField->function . '(' . $escapedParams . ')';
}

3
psalm-baseline.xml
View File

@ -7876,9 +7876,6 @@
</PossiblyUnusedMethod>
</file>
<file src="libraries/classes/InsertEdit.php">
<DeprecatedMethod>
<code>escapeString</code>
</DeprecatedMethod>
<InvalidArgument>
<code>$urlParams</code>
</InvalidArgument>