From 57607dbd2350a46523b0f60a83fecd8376c0d343 Mon Sep 17 00:00:00 2001 From: Daniel Friesen Date: Thu, 8 May 2008 11:03:03 +0000 Subject: [PATCH] SMW also sends horrid statements containing DISTINCT and AS which suffer the same issue as the ugly API queries. Guess we have to secure against this use to. --- includes/Database.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/Database.php b/includes/Database.php index f2bb4ba569..b702038018 100644 --- a/includes/Database.php +++ b/includes/Database.php @@ -1380,7 +1380,7 @@ class Database { # Note that we use a whitespace test rather than a \b test to avoid # any remote case where a word like on may be inside of a table name # surrounded by symbols which may be considered word breaks. - if( preg_match( '/(^|\s)(JOIN|ON)(\s|$)/i', $name ) !== 0 ) return $name; + if( preg_match( '/(^|\s)(DISTINCT|JOIN|ON|AS)(\s|$)/i', $name ) !== 0 ) return $name; # Split database and table into proper variables. # We reverse the explode so that database.table and table both output -- 2.20.1