[TASK] Doctrine: Create named parameters for value setting operations
To reduce the risk of SQL injections methods used to set values in the database have been modified to create named parameters by default. To work with SQL fragments/expressions this behavior can be disabled by setting $createNamedParameter to false. Releases: master Resolves: #75755 Change-Id: I03bff29b0d50c0a3e7d7dbf27538f1c3dfca51da Reviewed-on: https://review.typo3.org/47762 Reviewed-by:Susanne Moog <typo3@susannemoog.de> Tested-by:
Susanne Moog <typo3@susannemoog.de> Reviewed-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Tested-by:
Mathias Schreiber <mathias.schreiber@wmdb.de> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch>
parent
66fef7ae
Please register or sign in to comment