From dc5cf4766b52f1d04528cb53c204678263fcfbc4 Mon Sep 17 00:00:00 2001
From: William Desportes <williamdes@wdes.fr>
Date: Sat, 28 Aug 2021 04:06:18 +0200
Subject: [PATCH] Fix #16906 - Escape the table name that is checked with
 backquotes on canAccessStorageTable function

Signed-off-by: William Desportes <williamdes@wdes.fr>
---
 libraries/classes/Relation.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libraries/classes/Relation.php b/libraries/classes/Relation.php
index cfc516b60d..d0dfd0ff92 100644
--- a/libraries/classes/Relation.php
+++ b/libraries/classes/Relation.php
@@ -729,7 +729,7 @@ class Relation
     public function canAccessStorageTable(string $tableDbName): bool
     {
         $result = $this->queryAsControlUser(
-            'SELECT NULL FROM ' . $tableDbName . ' LIMIT 0',
+            'SELECT NULL FROM ' . Util::backquote($tableDbName) . ' LIMIT 0',
             false,
             DatabaseInterface::QUERY_STORE
         );