https://bugzilla.wikimedia.org/show_bug.cgi?id=63224

--- Comment #18 from Christian Dullweber 
<christian.dullwe...@student.hpi.uni-potsdam.de> ---
(In reply to Thiemo Mättig from comment #17)
> addQuotes to what? Field names? This can't work in SQLite. addQuotes is for
> values, not for identifiers. There are other methods like
> addIdentifierQuotes that may be more suitable.
I added addQuotes to $minProbability in our HAVING clause:
'HAVING'   => "prob > " . $dbr->addQuotes($minProbability)

I will change it floatval to put the escaping as near to the statement as
possible:
'HAVING'   => "prob > " . floatval($minProbability)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to