Project

General

Profile

Actions

Bug #14666

closed

class.t3lib_befunc.php uses "" in sql query in 3.8-dev

Added by Christian Welzel over 19 years ago. Updated over 18 years ago.

Status:
Closed
Priority:
Should have
Category:
-
Target version:
-
Start date:
2005-04-13
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
3.8.0-dev
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The class t3lib_befunc uses double quotation marks ("") in a sql query in line 3068. this causes an error on other databases then mysql when using dbal extention in typo3 3.8-dev.
the line reads as this:
$where_clause = 'username="admin" AND password="5f4dcc3b5aa765d61d8327deb882cf99"'.t3lib_BEfunc::deleteClause('be_users');
and should be this:
$where_clause = 'username="admin" AND password='.$GLOBALS['TYPO3_DB']->quoteStr("5f4dcc3b5aa765d61d8327deb882cf99","be_users").'.t3lib_BEfunc::deleteClause('be_users');

(issue imported from #M974)

Actions #1

Updated by Christian Welzel over 19 years ago

i mean, it should be like this:
$where_clause = 'username="admin" AND password='.$GLOBALS['TYPO3_DB']->quoteStr("5f4dcc3b5aa765d61d8327deb882cf99","be_users").t3lib_BEfunc::deleteClause('be_users');

Actions

Also available in: Atom PDF