From a8418afdebe92dde495bc5010645779c73939b7b Mon Sep 17 00:00:00 2001
From: Frédéric Guillot <fred@kanboard.net>
Date: Wed, 8 Oct 2014 21:49:25 -0400
Subject: Add Mysql escaping

---
 vendor/PicoDb/Table.php | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'vendor')

diff --git a/vendor/PicoDb/Table.php b/vendor/PicoDb/Table.php
index f13b4e11..9c6bf4f9 100644
--- a/vendor/PicoDb/Table.php
+++ b/vendor/PicoDb/Table.php
@@ -173,6 +173,10 @@ class Table
 
     public function buildSelectQuery()
     {
+        foreach ($this->columns as $key => $value) {
+            $this->columns[$key] = $this->db->escapeIdentifier($value);
+        }
+
         return sprintf(
             'SELECT %s %s FROM %s %s %s %s %s %s %s',
             $this->distinct ? 'DISTINCT' : '',
-- 
cgit v1.2.3