Fix #16906 - Escape the table name that is checked with backquotes on canAccessStorageTable function

Signed-off-by: William Desportes <williamdes@wdes.fr>
This commit is contained in:
William Desportes 2021-08-28 04:06:18 +02:00
parent b0ec0fd112
commit dc5cf4766b
No known key found for this signature in database
GPG Key ID: 90A0EF1B8251A889

View File

@ -729,7 +729,7 @@ class Relation
public function canAccessStorageTable(string $tableDbName): bool
{
$result = $this->queryAsControlUser(
'SELECT NULL FROM ' . $tableDbName . ' LIMIT 0',
'SELECT NULL FROM ' . Util::backquote($tableDbName) . ' LIMIT 0',
false,
DatabaseInterface::QUERY_STORE
);