Skip to content

Commit dbbb16e

Browse files
committed
Check Json types
1 parent b077bb0 commit dbbb16e

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

src/Common/Common.php

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,16 +25,20 @@ public static function mysql_escape($fieldValue)
2525
}
2626

2727
if (!empty($fieldValue) && is_string($fieldValue)) {
28-
return self::safeString($fieldValue);
28+
return str_replace(
29+
['\\', "\0", "\n", "\r", "'", '"', "\x1a"],
30+
['\\\\', '\\0', '\\n', '\\r', "\\'", '\\"', '\\Z'],
31+
$fieldValue
32+
);
2933
}
3034

3135
return $fieldValue;
3236
}
3337

34-
protected static function safeString($fieldValue){
38+
protected static function safeJsonString($fieldValue){
3539
return str_replace(
36-
['\\', "\0", "\n", "\r", "'", '"', "\x1a"],
37-
['\\\\', '\\0', '\\n', '\\r', "\\'", '\\"', '\\Z'],
40+
["'"],
41+
["\'"],
3842
$fieldValue
3943
);
4044
}
@@ -54,7 +58,7 @@ protected static function safeJson($jsonData,$asArray = false){
5458
if (self::is_json($value)){
5559
$safeJsonData[$key] = self::safeJson($jsonData,true);
5660
}elseif(is_string($value)){
57-
$safeJsonData[$key] = self::safeString($value);
61+
$safeJsonData[$key] = self::safeJsonString($value);
5862
}else{
5963
$safeJsonData[$key] = $value;
6064
}

0 commit comments

Comments
 (0)