element validation field cols not escaped correctly

p38

Active Member
I happend to have a field col called 'key'.

Using "isuniquevalue" and "areuniquevalues", I noticed the field col has not been escaped to prevent an sql error clash with the reserved word "key"

1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'key = '1' AND `keymanuals`.`id` <> '2'' at line 3 SQL=SELECT COUNT(*) FROM `keymanuals` WHERE key = '1' AND `keymanuals`.`id` <> '2'
 
wow, that was quick, many thanks.

Would you mind fixing "isuniquevalue" as well if not done already.

Many thanks,
 
We are in need of some funding.
More details.

Thank you.

Members online

Back
Top