#657 - add note about the intention of platform's string literal quotation method

d82d067a · Steve Müller · f6639e15 · d82d067a
Commit d82d067a authored Aug 21, 2014 by Steve Müller
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

AbstractPlatform.php lib/Doctrine/DBAL/Platforms/AbstractPlatform.php +4 -1

No files found.
--- a/lib/Doctrine/DBAL/Platforms/AbstractPlatform.php
+++ b/lib/Doctrine/DBAL/Platforms/AbstractPlatform.php
@@ -3488,7 +3488,10 @@ abstract class AbstractPlatform
    }

    /**
-     * Quotes a literal string
+     * Quotes a literal string.
+     * This method is NOT meant to fix SQL injections!
+     * It is only meant to escape this platform's string literal
+     * quote character inside the given literal string.
     *
     * @param string $str The literal string to be quoted.
     *