| Package home | Report new bug | New search | Development Roadmap | Status: Open | Feedback | All | Closed Since Version 2.5.0b5 |
| Bug #10521 | No qouting in qoute(decimal/float) | ||
|---|---|---|---|
| Submitted: | 2007-03-27 11:16 UTC | ||
| From: | nilya | Assigned: | quipo |
| Status: | Closed | Package: | MDB2 (version CVS) |
| PHP Version: | 5.2.1 | OS: | Any |
| Roadmaps: | (Not assigned) | ||
[2007-03-27 11:16 UTC] nilya
(Ilya Nazarov)
Description:
------------
Functions quote($val,'decimal') and quote($val,'float') passes unsafe characters.
Test script:
---------------
$val='100.3abc";d789';
echo "Val=", $val;
echo "\nQuote decimal=", $db->quote($val,'decimal');
echo "\nQuote float=", $db->quote($val,'float');
Expected result:
----------------
Val=100.3abc";d789
Quote decimal=100.3
Quote float=100.3
Actual result:
--------------
Val=100.3abc";d789
Quote decimal=100.3abc";d789
Quote float=100.3abc";d789
Comments
[2007-03-28 15:53 UTC] quipo
(Lorenzo Alberton)
This bug has been fixed in CVS.
If this was a documentation problem, the fix will appear on pear.php.net by the end of next Sunday (CET).
If this was a problem with the pear.php.net website, the change should be live shortly.
Otherwise, the fix will appear in the package's next release.
Thank you for the report and for helping us make PEAR better.