Merge pull request #14 from Bit-Apps-Pro/fix/sanitize-column

shuvomohajan · web-flow · commit b9443004e40f · 2025-02-12T17:31:17.000+06:00
fix: use sanitize_key to sanitize column in where condition
diff --git a/src/QueryBuilder.php b/src/QueryBuilder.php
@@ -1368,7 +1368,7 @@ private function getFrom()
     private function prepareColumnForWhere($clause)
     {
         if (isset($clause['column'])) {
-            return ' ' . $clause['column'];
+            return ' ' . sanitize_key($clause['column']);
         }
     }
 

Original file line number	Diff line number	Diff line change
`@@ -1368,7 +1368,7 @@ private function getFrom()`
`1368`	`1368`	`private function prepareColumnForWhere($clause)`
`1369`	`1369`	`{`
`1370`	`1370`	`if (isset($clause['column'])) {`
`1371`		`- return ' ' . $clause['column'];`
	`1371`	`+ return ' ' . sanitize_key($clause['column']);`
`1372`	`1372`	`}`
`1373`	`1373`	`}`
`1374`	`1374`