Added escaping for column name

7 years ago · 9828bde1db
1 changed files with 1 additions and 1 deletions
--- a/framework/validators/UniqueValidator.php
+++ b/framework/validators/UniqueValidator.php
@ -176,7 +176,7 @@ class UniqueValidator extends Validator
                $primaryAlias = array_keys($query->getTablesUsedInFrom())[0];
                $columns = $targetClass::primaryKey();
                foreach($columns as $c => $column) {
-                    $columns[$c] = "{{{$primaryAlias}}}.$column";
+                    $columns[$c] = "{{{$primaryAlias}}}.[[$column]]";
                }
                $query->select($columns);
            }