From 28e94447ebe5b70c3edc23116af9393d1da96630 Mon Sep 17 00:00:00 2001 From: "Olivier Perez [a570709]" Date: Thu, 13 Aug 2015 10:00:45 +0200 Subject: [PATCH] Escape table names in migration script --- admin/migration.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/admin/migration.php b/admin/migration.php index 1a85f65..196cc52 100644 --- a/admin/migration.php +++ b/admin/migration.php @@ -58,8 +58,8 @@ CREATE TABLE IF NOT EXISTS `' . $prefixedMigrationTable . '` ( DEFAULT CHARSET = utf8;'); } -$selectStmt = $pdo->prepare('SELECT id FROM ' . $prefixedMigrationTable . ' WHERE name=?'); -$insertStmt = $pdo->prepare('INSERT INTO ' . $prefixedMigrationTable . ' (name) VALUES (?)'); +$selectStmt = $pdo->prepare('SELECT id FROM `' . $prefixedMigrationTable . '` WHERE name=?'); +$insertStmt = $pdo->prepare('INSERT INTO `' . $prefixedMigrationTable . '` (name) VALUES (?)'); $countSucceeded = 0; $countFailed = 0; $countSkipped = 0;