opensource/HeidiSQL
1
0
Fork 0
mirror of https://github.com/HeidiSQL/HeidiSQL.git synced 2026-03-13 09:24:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

Issue #3304: Escape column names for PHP

Browse Source
This commit is contained in:
Ansgar Becker
2013-08-07 04:39:42 +00:00
parent 4628fac73d
commit 5520e84fc2
1 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
source/exportgrid.pas
View File

@@ -78,6 +78,7 @@ type
procedure SetExportFormatByFilename;
procedure SelectRecentFile(Sender: TObject);
procedure PutFilenamePlaceholder(Sender: TObject);
function EscapePHP(Text: String): String;
public
{ Public declarations }
property Grid: TVirtualStringTree read FGrid write FGrid;
@@ -441,6 +442,18 @@ begin
end;
function TfrmExportGrid.EscapePHP(Text: String): String;
begin
// String escaping for PHP output. Incompatible to TDBConnection.EscapeString.
Result := StringReplace(Text, '\', '\\', [rfReplaceAll]);
Result := StringReplace(Result, #13, '\r', [rfReplaceAll]);
Result := StringReplace(Result, #10, '\n', [rfReplaceAll]);
Result := StringReplace(Result, #9, '\t', [rfReplaceAll]);
Result := StringReplace(Result, '''', '\''', [rfReplaceAll]);
Result := '''' + Result + '''';
end;
procedure TfrmExportGrid.btnOKClick(Sender: TObject);
var
Col, ExcludeCol: TColumnIndex;
@@ -742,15 +755,12 @@ begin
Data := FormatNumber(Data);
Data := UnformatNumber(Data);
end;
else begin
Data := StringReplace(Data, '\', '\\', [rfReplaceAll]);
Data := StringReplace(Data, '''', '\''', [rfReplaceAll]);
Data := '''' + Data + '''';
end;
else
Data := EscapePHP(Data);
end;
if chkIncludeColumnNames.Checked then
tmp := tmp + #9#9 + '''' + Grid.Header.Columns[Col].Text + ''' => ' + Data + ','+CRLF
tmp := tmp + #9#9 + EscapePHP(Grid.Header.Columns[Col].Text) + ' => ' + Data + ','+CRLF
else
tmp := tmp + #9#9 + Data + ','+CRLF;
end;