From c337b72d5657d33c0f516f93c068d77dfeef5d2f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maur=C3=ADcio=20Meneghini=20Fauth?= Date: Wed, 9 Nov 2022 13:31:31 -0300 Subject: Replace escapeString in Table::getColumnGenerationExpression MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Maurício Meneghini Fauth --- libraries/classes/Table.php | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/libraries/classes/Table.php b/libraries/classes/Table.php index 00fd96b6e1..273f84e266 100644 --- a/libraries/classes/Table.php +++ b/libraries/classes/Table.php @@ -2533,17 +2533,16 @@ class Table implements Stringable && $this->dbi->getVersion() > 50705 && ! $GLOBALS['cfg']['Server']['DisableIS'] ) { - $sql = "SELECT + $sql = 'SELECT `COLUMN_NAME` AS `Field`, `GENERATION_EXPRESSION` AS `Expression` FROM `information_schema`.`COLUMNS` WHERE - `TABLE_SCHEMA` = '" . $this->dbi->escapeString($this->dbName) . "' - AND `TABLE_NAME` = '" . $this->dbi->escapeString($this->name) . "'"; + `TABLE_SCHEMA` = ' . $this->dbi->quoteString($this->dbName) . ' + AND `TABLE_NAME` = ' . $this->dbi->quoteString($this->name); if ($column != null) { - $sql .= " AND `COLUMN_NAME` = '" . $this->dbi->escapeString($column) - . "'"; + $sql .= ' AND `COLUMN_NAME` = ' . $this->dbi->quoteString($column); } return $this->dbi->fetchResult($sql, 'Field', 'Expression'); -- cgit v1.2.3