Actions
Feature #22338
closedAdded marker in CONTENT object
Start date:
2010-03-29
Due date:
% Done:
0%
Estimated time:
PHP Version:
5.2
Tags:
Complexity:
Sprint Focus:
Description
By using markers and properly quoting and escaping the values any value can be used in the properties of 'select'.
- a 'markers' property is add where the values of the markers (each with stdWrap support) can defined
- the values are properly escaped/quoted according to their type (integer, float, comma separated list, string (default)
- markers (as ###markername###) in all properties of 'select' (excepting andWhere) are replaced
This indirectly adds stdWrap to all properties of 'select' AND prevents SQL injection problems.
'andWhere' can become deprecated, because the only reason for its existence was stdWrap support.
Will solve problems mentioned with the solutions of issues 12094, 6882, 11220
(issue imported from #M13940)
Files
Actions