@@ 698-705 (lines=8) @@ | ||
695 | /** |
|
696 | * @group DDC-1500 |
|
697 | */ |
|
698 | public function testInvalidOrientation() |
|
699 | { |
|
700 | $this->expectException(ORMException::class); |
|
701 | $this->expectExceptionMessage('Invalid order by orientation specified for Doctrine\Tests\Models\CMS\CmsUser#username'); |
|
702 | ||
703 | $repo = $this->em->getRepository(CmsUser::class); |
|
704 | $repo->findBy(['status' => 'test'], ['username' => 'INVALID']); |
|
705 | } |
|
706 | ||
707 | /** |
|
708 | * @group DDC-1713 |
|
@@ 991-998 (lines=8) @@ | ||
988 | /** |
|
989 | * @group DDC-3045 |
|
990 | */ |
|
991 | public function testFindByFieldInjectionPrevented() |
|
992 | { |
|
993 | $this->expectException(ORMException::class); |
|
994 | $this->expectExceptionMessage('Unrecognized field: '); |
|
995 | ||
996 | $repository = $this->em->getRepository(CmsUser::class); |
|
997 | $repository->findBy(['username = ?; DELETE FROM cms_users; SELECT 1 WHERE 1' => 'test']); |
|
998 | } |
|
999 | ||
1000 | /** |
|
1001 | * @group DDC-3045 |
|
@@ 1003-1010 (lines=8) @@ | ||
1000 | /** |
|
1001 | * @group DDC-3045 |
|
1002 | */ |
|
1003 | public function testFindOneByFieldInjectionPrevented() |
|
1004 | { |
|
1005 | $this->expectException(ORMException::class); |
|
1006 | $this->expectExceptionMessage('Unrecognized field: '); |
|
1007 | ||
1008 | $repository = $this->em->getRepository(CmsUser::class); |
|
1009 | $repository->findOneBy(['username = ?; DELETE FROM cms_users; SELECT 1 WHERE 1' => 'test']); |
|
1010 | } |
|
1011 | ||
1012 | /** |
|
1013 | * @group DDC-3045 |
|
@@ 1032-1039 (lines=8) @@ | ||
1029 | /** |
|
1030 | * @group DDC-3045 |
|
1031 | */ |
|
1032 | public function testFindInjectionPrevented() |
|
1033 | { |
|
1034 | $this->expectException(ORMException::class); |
|
1035 | $this->expectExceptionMessage('Unrecognized identifier fields: '); |
|
1036 | ||
1037 | $repository = $this->em->getRepository(CmsUser::class); |
|
1038 | $repository->find(['username = ?; DELETE FROM cms_users; SELECT 1 WHERE 1' => 'test', 'id' => 1]); |
|
1039 | } |
|
1040 | ||
1041 | /** |
|
1042 | * @group DDC-3056 |