BUGFIX: escaping operandi/selectandi

sroehrl · Jun 13, 2019 · 097fc3d · 097fc3d
1 parent ca542e9
commit 097fc3d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/DbOps.php b/DbOps.php
@@ -85,7 +85,7 @@ protected function operandi($string, $set = false, $prepared = false) {
             case '=':
                 // important! this is the first rule and needs to stay as such!
                 $return = ' = ? ';
-                $this->addExclusion($string);
+                $this->addExclusion(substr($string, 1));
                 break;
             case '>':
             case '<':
@@ -150,7 +150,7 @@ protected function selectandi($string) {
         $rest = substr($string, 1);
         switch($firstLetter) {
             case '=':
-                $return = $this->addBackticks($string);
+                $return = $this->addBackticks(substr($string, 1));
                 break;
             case '#':
                 $return = 'UNIX_TIMESTAMP(' . $this->_sanitizeAndAddBackticks($this->cleanAs($rest)) . ')*1000';

diff --git a/composer.json b/composer.json
@@ -1,7 +1,7 @@
 {
   "name": "neoan3-apps/db",
   "description": "neoan3 mysqli class",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "license": "MIT",
   "require": {
     "php": "^7.0",