From 970a33b2ed15cdd45827d3c3e33f6b86b2fb44a7 Mon Sep 17 00:00:00 2001 From: Michael Stucki Date: Tue, 26 Feb 2013 01:19:02 +0100 Subject: [PATCH] [BUGFIX] Fix SQL syntax Use single quotes to retain compatibility with PostgreSQL. Change-Id: I07de0fea0320caed710911750240e35c66f3b679 Resolves: #45826 Releases: 6.1, 6.0 Reviewed-on: https://review.typo3.org/18476 Reviewed-by: Wouter Wolters Reviewed-by: Alexander Opitz Tested-by: Alexander Opitz Reviewed-by: Xavier Perseguers Tested-by: Xavier Perseguers Reviewed-by: Christian Kuhn Tested-by: Christian Kuhn --- typo3/sysext/core/Classes/Resource/FileRepository.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/typo3/sysext/core/Classes/Resource/FileRepository.php b/typo3/sysext/core/Classes/Resource/FileRepository.php index 623fa84..bfb391d 100644 --- a/typo3/sysext/core/Classes/Resource/FileRepository.php +++ b/typo3/sysext/core/Classes/Resource/FileRepository.php @@ -151,10 +151,10 @@ class FileRepository extends AbstractRepository { $rows = $GLOBALS['TYPO3_DB']->exec_SELECTgetRows( '*', $this->table, - sprintf('storage=%u AND identifier LIKE "%s" AND NOT identifier LIKE "%s"', + sprintf('storage=%u AND identifier LIKE %s AND NOT identifier LIKE %s', $storage, - $GLOBALS['TYPO3_DB']->escapeStrForLike($identifier, $this->table) . '%', - $GLOBALS['TYPO3_DB']->escapeStrForLike($identifier, $this->table) . '%/%' + $GLOBALS['TYPO3_DB']->fullQuoteStr($GLOBALS['TYPO3_DB']->escapeStrForLike($identifier, $this->table) . '%', $this->table), + $GLOBALS['TYPO3_DB']->fullQuoteStr($GLOBALS['TYPO3_DB']->escapeStrForLike($identifier, $this->table) . '%/%', $this->table) ), '', '', @@ -275,4 +275,4 @@ class FileRepository extends AbstractRepository { } -?> \ No newline at end of file +?> -- 2.1.4