TYPO3 Core

If an none admin call QueryGenerator::getSelectQuery, bind values will be assign to the $queryBuilder and then thrown away, since the method just returns the string $queryBuilder->getSQL(). This will cause an sql error:

Error: An exception occurred while executing 'SELECT `header`, `uid`, `pid`, `pid`, `deleted` FROM `tt_content` WHERE (`pid` IN (:dcValue1)) AND (tt_content.CType = 'test') AND (`tt_content`.`deleted` = 0) LIMIT 100': You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ':dcValue1)) AND (tt_content.CType = 'test') AND (`tt_content`.`deleted` = 0) L' at line 1

Also the return type is notes as bool|\mysqli_result|object but is actually a string.