Annajwaszahro
/
MIF_E31222691
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use DB::escape() shortcut in profiler.

This commit is contained in:
Franz Liedke 2012-10-11 18:24:43 +03:00
parent 1081ac1b8a
commit d7dfd4f915
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
laravel/profiling/profiler.php
View File

@ -145,7 +145,7 @@ public static function query($sql, $bindings, $time)
{ {
foreach ($bindings as $binding) foreach ($bindings as $binding)
{ {
$binding = Database::connection()->pdo->quote($binding); $binding = Database::escape($binding);
$sql = preg_replace('/\?/', $binding, $sql, 1); $sql = preg_replace('/\?/', $binding, $sql, 1);
$sql = htmlspecialchars($sql); $sql = htmlspecialchars($sql);