tests/Doctrine/Tests/DBAL/Functional/DataAccessTest.php 1 location
                
                
                    
                                                
                                                    
                                 | 
                                
                                    @@ 580-586 (lines=7) @@
                                 | 
                            
                                                            
                                    | 577 | 
                                     | 
                                            $this->assertEquals(0, $row['locate9']);  | 
                                
                                                            
                                    | 578 | 
                                     | 
                                        }  | 
                                
                                                            
                                    | 579 | 
                                     | 
                                     | 
                                
                                                            
                                    | 580 | 
                                     | 
                                        public function testQuoteSQLInjection()  | 
                                
                                                            
                                    | 581 | 
                                     | 
                                        { | 
                                
                                                            
                                    | 582 | 
                                     | 
                                            $sql = "SELECT * FROM fetch_table WHERE test_string = " . $this->_conn->quote("bar' OR '1'='1"); | 
                                
                                                            
                                    | 583 | 
                                     | 
                                            $rows = $this->_conn->fetchAll($sql);  | 
                                
                                                            
                                    | 584 | 
                                     | 
                                     | 
                                
                                                            
                                    | 585 | 
                                     | 
                                            $this->assertEquals(0, count($rows), "no result should be returned, otherwise SQL injection is possible");  | 
                                
                                                            
                                    | 586 | 
                                     | 
                                        }  | 
                                
                                                            
                                    | 587 | 
                                     | 
                                     | 
                                
                                                            
                                    | 588 | 
                                     | 
                                        /**  | 
                                
                                                            
                                    | 589 | 
                                     | 
                                         * @group DDC-1213  | 
                                
                                                                        
                 
                                                            
                    
tests/Doctrine/Tests/DBAL/Functional/WriteTest.php 1 location
                
                
                    
                                                
                                                    
                                 | 
                                
                                    @@ 40-46 (lines=7) @@
                                 | 
                            
                                                            
                                    | 37 | 
                                     | 
                                            $this->assertTrue((bool)$this->_conn->fetchColumn($sql, array("text", 1111))); | 
                                
                                                            
                                    | 38 | 
                                     | 
                                        }  | 
                                
                                                            
                                    | 39 | 
                                     | 
                                     | 
                                
                                                            
                                    | 40 | 
                                     | 
                                        public function testExecuteUpdate()  | 
                                
                                                            
                                    | 41 | 
                                     | 
                                        { | 
                                
                                                            
                                    | 42 | 
                                     | 
                                            $sql = "INSERT INTO write_table (test_int) VALUES ( " . $this->_conn->quote(1) . ")";  | 
                                
                                                            
                                    | 43 | 
                                     | 
                                            $affected = $this->_conn->executeUpdate($sql);  | 
                                
                                                            
                                    | 44 | 
                                     | 
                                     | 
                                
                                                            
                                    | 45 | 
                                     | 
                                            $this->assertEquals(1, $affected, "executeUpdate() should return the number of affected rows!");  | 
                                
                                                            
                                    | 46 | 
                                     | 
                                        }  | 
                                
                                                            
                                    | 47 | 
                                     | 
                                     | 
                                
                                                            
                                    | 48 | 
                                     | 
                                        public function testExecuteUpdateWithTypes()  | 
                                
                                                            
                                    | 49 | 
                                     | 
                                        { |