diff options
| author | Aleksander Machniak <alec@alec.pl> | 2014-09-12 14:37:51 +0200 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2014-09-12 14:37:51 +0200 |
| commit | 34a0902089a410d1f7dda78d1f8b0771333c09df (patch) | |
| tree | 729c7a994d64b7dbf9f78656d95b34846cae58ba /installer/test.php | |
| parent | 8cc65d1f5fae71e2ee07748e82ab274d8d45304b (diff) | |
Use consistent column/table quoting in sql queries
Diffstat (limited to 'installer/test.php')
| -rw-r--r-- | installer/test.php | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/installer/test.php b/installer/test.php index 72c7a1f76..988451e9f 100644 --- a/installer/test.php +++ b/installer/test.php @@ -154,7 +154,7 @@ else if ($db_working && $_POST['updatedb']) { // test database if ($db_working) { - $db_read = $DB->query("SELECT count(*) FROM {$RCI->config['db_prefix']}users"); + $db_read = $DB->query("SELECT count(*) FROM " . $DB->quote_identifier($RCI->config['db_prefix'] . 'users')); if ($DB->is_error()) { $RCI->fail('DB Schema', "Database not initialized"); echo '<p><input type="submit" name="initdb" value="Initialize database" /></p>'; @@ -178,17 +178,19 @@ if ($db_working) { if ($db_working) { // write test $insert_id = md5(uniqid()); - $db_write = $DB->query("INSERT INTO {$RCI->config['db_prefix']}session (sess_id, created, ip, vars) VALUES (?, ".$DB->now().", '127.0.0.1', 'foo')", $insert_id); + $db_write = $DB->query("INSERT INTO " . $DB->quote_identifier($RCI->config['db_prefix'] . 'session') + . " (`sess_id`, `created`, `ip`, `vars`) VALUES (?, ".$DB->now().", '127.0.0.1', 'foo')", $insert_id); if ($db_write) { $RCI->pass('DB Write'); - $DB->query("DELETE FROM {$RCI->config['db_prefix']}session WHERE sess_id=?", $insert_id); + $DB->query("DELETE FROM " . $DB->quote_identifier($RCI->config['db_prefix'] . 'session') + . " WHERE `sess_id` = ?", $insert_id); } else { $RCI->fail('DB Write', $RCI->get_error()); } echo '<br />'; - + // check timezone settings $tz_db = 'SELECT ' . $DB->unixtimestamp($DB->now()) . ' AS tz_db'; $tz_db = $DB->query($tz_db); |