Merge pull request #99 from sparksp/aeae2c8476523f1551825afcc17323c4b88d22c5

Secure extracts
2011-10-05 21:26:35 -07:00
parent c00738a070 aeae2c8476
commit 2c2dcdc502
2 changed files with 2 additions and 2 deletions
--- a/laravel/database/grammars/grammar.php
+++ b/laravel/database/grammars/grammar.php
@@ -89,7 +89,7 @@ class Grammar {

 		foreach ($query->joins as $join)
 		{
-			extract($join);
+			extract($join, EXTR_SKIP);

 			list($column1, $column2) = array($this->wrap($column1), $this->wrap($column2));