php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-08-26 14:26:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

AFTER column name is now escaped by safe method

Browse Source
This commit is contained in:
Chris Harris
2016-02-21 04:08:57 -08:00
parent f52f60db0f
commit 6a8348da5f
3 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
framework/db/cubrid/ColumnSchemaBuilder.php
View File

@ -7,6 +7,7 @@
namespace yii\db\cubrid; namespace yii\db\cubrid;
use Yii;
use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder; use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder;
/** /**
@ -30,7 +31,9 @@ class ColumnSchemaBuilder extends AbstractColumnSchemaBuilder
*/ */
protected function buildAfterString() protected function buildAfterString()
{ {
return $this->after !== null ? " AFTER ('{$this->after}')" : ''; return $this->after !== null ?
' AFTER (' . Yii::$app->db->quoteColumnName($this->after) . ')' :
'';
} }
/** /**

5
framework/db/mysql/ColumnSchemaBuilder.php
View File

@ -7,6 +7,7 @@
namespace yii\db\mysql; namespace yii\db\mysql;
use Yii;
use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder; use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder;
/** /**
@ -30,7 +31,9 @@ class ColumnSchemaBuilder extends AbstractColumnSchemaBuilder
*/ */
protected function buildAfterString() protected function buildAfterString()
{ {
return $this->after !== null ? " AFTER ('{$this->after}')" : ''; return $this->after !== null ?
' AFTER (' . Yii::$app->db->quoteColumnName($this->after) . ')' :
'';
} }
/** /**

5
framework/db/oci/ColumnSchemaBuilder.php
View File

@ -7,6 +7,7 @@
namespace yii\db\oci; namespace yii\db\oci;
use Yii;
use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder; use yii\db\ColumnSchemaBuilder as AbstractColumnSchemaBuilder;
/** /**
@ -30,7 +31,9 @@ class ColumnSchemaBuilder extends AbstractColumnSchemaBuilder
*/ */
protected function buildAfterString() protected function buildAfterString()
{ {
return $this->after !== null ? " AFTER ('{$this->after}')" : ''; return $this->after !== null ?
' AFTER (' . Yii::$app->db->quoteColumnName($this->after) . ')' :
'';
} }
/** /**