escape like parameter for move queries
This commit is contained in:
parent
d514200b56
commit
d36e1bbab2
|
@ -499,7 +499,7 @@ class Cache {
|
||||||
if ($sourceData['mimetype'] === 'httpd/unix-directory') {
|
if ($sourceData['mimetype'] === 'httpd/unix-directory') {
|
||||||
//find all child entries
|
//find all child entries
|
||||||
$sql = 'SELECT `path`, `fileid` FROM `*PREFIX*filecache` WHERE `storage` = ? AND `path` LIKE ?';
|
$sql = 'SELECT `path`, `fileid` FROM `*PREFIX*filecache` WHERE `storage` = ? AND `path` LIKE ?';
|
||||||
$result = $this->connection->executeQuery($sql, [$sourceStorageId, $sourcePath . '/%']);
|
$result = $this->connection->executeQuery($sql, [$sourceStorageId, $this->connection->escapeLikeParameter($sourcePath) . '/%']);
|
||||||
$childEntries = $result->fetchAll();
|
$childEntries = $result->fetchAll();
|
||||||
$sourceLength = strlen($sourcePath);
|
$sourceLength = strlen($sourcePath);
|
||||||
$this->connection->beginTransaction();
|
$this->connection->beginTransaction();
|
||||||
|
|
Loading…
Reference in New Issue