Browse Source

Fix #18134: Expression as columnName should not be quoted in likeCondition

tags/2.0.36
DarkDef 4 years ago committed by GitHub
parent
commit
1faa45c552
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 1
      framework/CHANGELOG.md
  2. 4
      framework/db/conditions/LikeConditionBuilder.php
  3. 3
      tests/framework/db/QueryBuilderTest.php

1
framework/CHANGELOG.md

@ -25,6 +25,7 @@ Yii Framework 2 Change Log
- Enh #15202: Add optional param `--silent-exit-on-exception` in `yii\console\Controller` (egorrishe)
- Bug #18110: Add quotes to return value of viewName in MSSQL schema. It is `[someView]` now (darkdef)
- Bug #17985: Convert migrationNamespaces to array if needed (darkdef)
- Bug #18134: Expression as columnName should not be quoted in likeCondition (darkdef)
2.0.35 May 02, 2020

4
framework/db/conditions/LikeConditionBuilder.php

@ -66,7 +66,9 @@ class LikeConditionBuilder implements ExpressionBuilderInterface
return $not ? '' : '0=1';
}
if (strpos($column, '(') === false) {
if ($column instanceof ExpressionInterface) {
$column = $this->queryBuilder->buildExpression($column, $params);
} elseif (is_string($column) && strpos($column, '(') === false) {
$column = $this->queryBuilder->db->quoteColumnName($column);
}

3
tests/framework/db/QueryBuilderTest.php

@ -2490,6 +2490,9 @@ abstract class QueryBuilderTest extends DatabaseTestCase
[new LikeCondition('name', 'not like', [new Expression('CONCAT("test", name, "%")'), '\ab_c']), '[[name]] NOT LIKE CONCAT("test", name, "%") AND [[name]] NOT LIKE :qp0', [':qp0' => '%\\\ab\_c%']],
[new LikeCondition('name', 'or like', [new Expression('CONCAT("test", name, "%")'), '\ab_c']), '[[name]] LIKE CONCAT("test", name, "%") OR [[name]] LIKE :qp0', [':qp0' => '%\\\ab\_c%']],
[new LikeCondition('name', 'or not like', [new Expression('CONCAT("test", name, "%")'), '\ab_c']), '[[name]] NOT LIKE CONCAT("test", name, "%") OR [[name]] NOT LIKE :qp0', [':qp0' => '%\\\ab\_c%']],
// like with expression as columnName
[['like', new Expression('name'), 'string'], 'name LIKE :qp0', [':qp0' => "%string%"]],
];
// adjust dbms specific escaping

Loading…
Cancel
Save