Fixing quotes in array parameters

Author: Raphaël BERGINA

src/SQLParser/Node/Parameter.php

@@ -168,7 +168,7 @@ public function toSql(array $parameters = array(), Connection $dbConnection = nu
                 } else {
                     if(is_array($parameters[$this->name])){
                         return '('.implode(',',array_map(function($item) {
-                            return addslashes($this->autoPrepend.$item.$this->autoAppend);
+                            return "'".addslashes($this->autoPrepend.$item.$this->autoAppend)."'";
                         }, $parameters[$this->name])).')';
                     } else{
                        return "'".addslashes($this->autoPrepend.$parameters[$this->name].$this->autoAppend)."'"; 

tests/Mouf/Database/MagicQueryTest.php

@@ -18,6 +18,9 @@ public function testStandardSelect()
         $sql = 'SELECT * FROM users WHERE name LIKE :name AND company LIKE :company';
         $this->assertEquals("SELECT * FROM users WHERE (name LIKE 'foo')", self::simplifySql($magicQuery->build($sql, ['name' => 'foo'])));
         $this->assertEquals("SELECT * FROM users WHERE (name LIKE 'foo') AND (company LIKE 'bar')", self::simplifySql($magicQuery->build($sql, ['name' => 'foo', 'company' => 'bar'])));
+
+        $sql = 'SELECT * FROM users WHERE status in :status';
+        $this->assertEquals("SELECT * FROM users WHERE status IN ('2','4')", self::simplifySql($magicQuery->build($sql, ['status' => [2,4]])));
     }
 
     /**