ivo/ponzi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use DB::escape() shortcut in profiler.

Browse Source
This commit is contained in:
Franz Liedke
2012-10-11 18:24:43 +03:00
parent 1081ac1b8a
commit d7dfd4f915
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
laravel/profiling/profiler.php
View File

@@ -145,7 +145,7 @@ class Profiler {
{ {
foreach ($bindings as $binding) foreach ($bindings as $binding)
{ {
$binding = Database::connection()->pdo->quote($binding); $binding = Database::escape($binding);
$sql = preg_replace('/\?/', $binding, $sql, 1); $sql = preg_replace('/\?/', $binding, $sql, 1);
$sql = htmlspecialchars($sql); $sql = htmlspecialchars($sql);