Skip to content
Commit 02dc3256 authored by Morton Jonuschat's avatar Morton Jonuschat Committed by Christian Kuhn
Browse files

[TASK] Doctrine: Create named parameters for value setting operations

To reduce the risk of SQL injections methods used to set values in the
database have been modified to create named parameters by default.

To work with SQL fragments/expressions this behavior can be disabled by
setting $createNamedParameter to false.

Releases: master
Resolves: #75755
Change-Id: I03bff29b0d50c0a3e7d7dbf27538f1c3dfca51da
Reviewed-on: https://review.typo3.org/47762


Reviewed-by: default avatarSusanne Moog <typo3@susannemoog.de>
Tested-by: default avatarSusanne Moog <typo3@susannemoog.de>
Reviewed-by: default avatarMathias Schreiber <mathias.schreiber@wmdb.de>
Tested-by: default avatarMathias Schreiber <mathias.schreiber@wmdb.de>
Reviewed-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
Tested-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
parent 66fef7ae
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment