diff options
| author | David Rothstein <drothstein@gmail.com> | 2014-11-03 09:44:23 -0500 |
|---|---|---|
| committer | David Rothstein <drothstein@gmail.com> | 2014-11-03 09:44:23 -0500 |
| commit | 0b4c3b17e2209b1804a7b6b5974e5217c3e2a87e (patch) | |
| tree | 4140304ba57d109519531083036c1599df9a2f36 /modules/simpletest | |
| parent | f7cf579dfb85ffb21f7870ef1c73aec4147127f9 (diff) | |
| download | brdo-0b4c3b17e2209b1804a7b6b5974e5217c3e2a87e.tar.gz brdo-0b4c3b17e2209b1804a7b6b5974e5217c3e2a87e.tar.bz2 | |
Issue #2357311 by penyaskito: Fixed Follow-up to SA-CORE-2014-005 (tests don't work correctly on non-MySQL databases).
Diffstat (limited to 'modules/simpletest')
| -rw-r--r-- | modules/simpletest/tests/database_test.test | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/simpletest/tests/database_test.test b/modules/simpletest/tests/database_test.test index a65cc64ec..12ddb343e 100644 --- a/modules/simpletest/tests/database_test.test +++ b/modules/simpletest/tests/database_test.test @@ -3400,7 +3400,7 @@ class DatabaseQueryTestCase extends DatabaseTestCase { public function testArrayArgumentsSQLInjection() { // Attempt SQL injection and verify that it does not work. $condition = array( - "1 ;INSERT INTO {test} SET name = 'test12345678'; -- " => '', + "1 ;INSERT INTO {test} (name) VALUES ('test12345678'); -- " => '', '1' => '', ); try { |