TYPO3 Core

Seems still not to be included in Typo3 Version 4.2.1

or is there a work around, how to solve the above example without stdWrap?

workaround: select.andWhere has stdWrap property

just for notice, that feature would make it possible to write sql-statements in this way:

select.where.cObject = COA
select.where.cObject {
10 = TEXT
10.value = colPos={field:colPos}
20 = TEXT
20.value = AND pid IN ({field:pages})
stdWrap.insertData = 1
}

Added a patch for current 4.3 trunk and with warning comments to avoid using GPvars to avoid SQL-Injections

Thanks Sebastian! However, who is looking into the source code while typing TypoScript? The proper place would be TSref - but then it's still possible to produce insecure settings...

well, it is possible to produce SQL-Injections right now - use andWhere.stdWrap for proper SQL Injection vulerability;)

perhaps it would make sense to integrate
fullQuoteStr as an stdWrap option - than you would not need an userFunction for that

ok, i opened a ticket for that: #21169

Could this be closed because of the markers concept in #22338?

I just wanted to ask the same which Bastian already asked above:

Is this done with #22338?

Function-wise it cann all be done with markers (#22338), I agree. But having andWhere with stdWrap-support but not where sounds unlogic to me. Markers are imho a "heavy" way to solve even just small problems where somebody might just want to do something simple with an ID or typeNum he got from somewhere it (not GPvar). I like the idea of having where also support stdWrap "to have it clean".

(If there are strong objectionions, then those people please file another proposal to deprecate andWhere-stdWrap-support :-))

Patch set 1 of change I22c0e2c1c49fdd44ab67b823043a2e07f304e8c8 has been pushed to the review server.
It is available at http://review.typo3.org/3337

Patch set 2 of change I22c0e2c1c49fdd44ab67b823043a2e07f304e8c8 has been pushed to the review server.
It is available at http://review.typo3.org/3337

Patch set 3 of change I22c0e2c1c49fdd44ab67b823043a2e07f304e8c8 has been pushed to the review server.
It is available at http://review.typo3.org/3337

The documentation has been added to the wiki.