[BUGFIX] DBAL: Fix quoting of single quotes in WHERE values for MSSQL 03/42803/3
authorMorton Jonuschat <m.jonuschat@mojocode.de>
Fri, 21 Aug 2015 08:42:47 +0000 (10:42 +0200)
committerChristian Kuhn <lolli@schwarzbu.ch>
Wed, 9 Sep 2015 10:11:44 +0000 (12:11 +0200)
commit6bb7938175f9775ef4f054304bd9455990aa96b5
treeb27c7e0b17e157f311899e790b248668d334c26d
parent69e03be15231cc4fca54d8c5247b223abaad9793
[BUGFIX] DBAL: Fix quoting of single quotes in WHERE values for MSSQL

MSSQL escapes single quotes in values by doubling them. When parsing the
WHERE clause DBAL removed the escaping without performing the required
escaping of the values when compiling the query. This is fixed by adding
a special handling of MSSQL in _quoteWhereClause().

Resolves: #27760
Releases: master, 6.2
Change-Id: I9b8f4fa6ab6e47bd44e6998ee3a492468713cbf0
Reviewed-on: http://review.typo3.org/42803
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: Tizian Schmidlin <st@cabag.ch>
Tested-by: Tizian Schmidlin <st@cabag.ch>
Reviewed-by: Xavier Perseguers <xavier@typo3.org>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
typo3/sysext/dbal/Classes/Database/DatabaseConnection.php
typo3/sysext/dbal/Tests/Unit/Database/DatabaseConnectionMssqlTest.php