Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
P
PHP-MySQLi-Database-Class
Project
Project
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Kulya
PHP-MySQLi-Database-Class
Commits
70a3686c
Commit
70a3686c
authored
Sep 06, 2015
by
Alexander Butenko
Browse files
Options
Browse Files
Download
Plain Diff
Merge pull request #318 from avbdr/master
Added * as a valid char for orderBy and groupBy
parents
8041c0f4
a6d5f132
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
2 additions
and
2 deletions
+2
-2
MysqliDb.php
MysqliDb.php
+2
-2
No files found.
MysqliDb.php
View file @
70a3686c
...
...
@@ -713,7 +713,7 @@ class MysqliDb
{
$allowedDirection
=
Array
(
"ASC"
,
"DESC"
);
$orderbyDirection
=
strtoupper
(
trim
(
$orderbyDirection
));
$orderByField
=
preg_replace
(
"/[^-a-z0-9\.\(\),_`]+/i"
,
''
,
$orderByField
);
$orderByField
=
preg_replace
(
"/[^-a-z0-9\.\(\),_`
\*
]+/i"
,
''
,
$orderByField
);
// Add table prefix to orderByField if needed.
//FIXME: We are adding prefix only if table is enclosed into `` to distinguish aliases
...
...
@@ -746,7 +746,7 @@ class MysqliDb
*/
public
function
groupBy
(
$groupByField
)
{
$groupByField
=
preg_replace
(
"/[^-a-z0-9\.\(\),_]+/i"
,
''
,
$groupByField
);
$groupByField
=
preg_replace
(
"/[^-a-z0-9\.\(\),_
\*
]+/i"
,
''
,
$groupByField
);
$this
->
_groupBy
[]
=
$groupByField
;
return
$this
;
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment