Project

General

Profile

Actions
Copy link

Bug #15483

closed

rtehtmlarea uses hardcoded "" in sql-query

Added by Christian Welzel almost 19 years ago. Updated over 18 years ago.

Status:
Closed
Priority:
Should have
Assignee:
Stanislas Rolland
Category:
RTE (rtehtmlarea + ckeditor)
Target version:
-
Start date:
2006-01-22
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

the rtehtmlarea uses an hardcoded quoting in line 437 of class.tx_rtehtmlarea_base.php. this causes an error when using other db as mysql (eg postgres through dbal).
the correct way to quote this is to use

whereClause = 'lg_iso_2 = ' . $TYPO3_DB->fullQuoteStr(strtoupper($this->contentISOLanguage), $table);

(issue imported from #M2358)

Actions
Copy link
 #1

Updated by Christian Welzel almost 19 years ago

same thing in pi1/class.tx_rtehtmlarea_pi1.php line 112.
either do not quote the 1 at all (its an integer) or use dbal::fullQuoteStr()

Actions
Copy link
 #2

Updated by Stanislas Rolland almost 19 years ago

Thanks.

Fixed in [cvs] / typo3 / TYPO3core / typo3 / sysext / rtehtmlarea, branch TYPO3_4-0.

Regards,
Stanislas

Actions
Copy link

Also available in: Atom PDF