Implemented new escape class 'mysql' (realEscapeString).
Implemented defaultEscapeType. configurable via config.qfq.ini (global) and per Form. Implemented max GET parameter lenght. Default: 50. BTW: in phpunit test there have been a parameter 'file' which exceeds the limit of 32. Config.qfq: Skip empty variable names - happens in phpunit tests. Read new `systemEscapeTypeDefault`. Constants.php: renamed TOKEN_LDAP_ESCAPE_* to TOKEN_ESCAPE_LDAP_*. Add TOKEN_ESCAPE_MYSQL, TOKEN_ESCAPE_NONE Database.php: Set charset to real_escape_string() functions properly. Proxy for mysqli::real_escape_string() Evaluate.php: Respect global escapeTypeDefault. Implement formEditor.sql: add column `escapeTypeDefault`. Add FormElement 'escapeTypeDefault'.
Showing
- extension/Documentation/Manual.rst 33 additions, 5 deletionsextension/Documentation/Manual.rst
- extension/config.qfq.example.ini 5 additions, 1 deletionextension/config.qfq.example.ini
- extension/qfq/qfq/AbstractBuildForm.php 4 additions, 0 deletionsextension/qfq/qfq/AbstractBuildForm.php
- extension/qfq/qfq/Constants.php 17 additions, 11 deletionsextension/qfq/qfq/Constants.php
- extension/qfq/qfq/Database.php 15 additions, 0 deletionsextension/qfq/qfq/Database.php
- extension/qfq/qfq/Evaluate.php 23 additions, 3 deletionsextension/qfq/qfq/Evaluate.php
- extension/qfq/qfq/QuickFormQuery.php 6 additions, 1 deletionextension/qfq/qfq/QuickFormQuery.php
- extension/qfq/qfq/store/Config.php 21 additions, 4 deletionsextension/qfq/qfq/store/Config.php
- extension/qfq/sql/formEditor.sql 8 additions, 5 deletionsextension/qfq/sql/formEditor.sql
- extension/qfq/tests/phpunit/StoreTest.php 6 additions, 0 deletionsextension/qfq/tests/phpunit/StoreTest.php
- extension/qfq/tests/phpunit/fixtures/TestFormEditor.sql 37 additions, 36 deletionsextension/qfq/tests/phpunit/fixtures/TestFormEditor.sql
Loading
Please register or sign in to comment