Skip to content

D
doctrine-dbal
Commit d82d067a authored by Steve Müller's avatar Steve Müller
Browse files
Options

#657 - add note about the intention of platform's string literal quotation method

parent f6639e15
Show whitespace changes
Inline Side-by-side
Showing with 4 additions and 1 deletion
lib/Doctrine/DBAL/Platforms/AbstractPlatform.php
View file @ d82d067a
...@@ -3488,7 +3488,10 @@ abstract class AbstractPlatform ...@@ -3488,7 +3488,10 @@ abstract class AbstractPlatform
} }
/** /**
* Quotes a literal string * Quotes a literal string.
* This method is NOT meant to fix SQL injections!
* It is only meant to escape this platform's string literal
* quote character inside the given literal string.
* *
* @param string $str The literal string to be quoted. * @param string $str The literal string to be quoted.
* *
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment