Project

General

Profile

Actions

Task #75755

closed

Epic #75555: Further Doctrine Development

Automatically create a named parameter for value related QueryBuilder methods

Added by Morton Jonuschat about 8 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Should have
Category:
Database API (Doctrine DBAL)
Target version:
Start date:
2016-04-18
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
7.0
Tags:
Complexity:
Sprint Focus:

Description

To reduce the risks of SQL injections automatically create named parameters for methods that commonly deal with user input like ->set(), ->setValue() and ->values()
Provide the option to disable this behavior to allow for advanced usage with SQL expressions.

Actions #1

Updated by Gerrit Code Review about 8 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/47762

Actions #2

Updated by Gerrit Code Review about 8 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/47762

Actions #3

Updated by Morton Jonuschat about 8 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #4

Updated by Riccardo De Contardi over 6 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF