Fix issue where ? can leak in via conditions

activecollab · Oct 9, 2023 · 4b10203 · 4b10203
1 parent 8890641
commit 4b10203
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Validator.php b/src/Validator.php
@@ -374,7 +374,7 @@ private function prepareUniquenessValidatorSql(array $field_names, mixed $where)
 
         return $this->connection->prepare(
             sprintf(
-                "SELECT COUNT(`id`) AS 'row_count' FROM %s WHERE (%s) AND (`id` != ?)",
+                "SELECT COUNT(`id`) AS 'row_count' FROM %s WHERE `id` != ? AND (%s)",
                 $this->connection->escapeTableName($this->table_name),
                 implode(' AND ', $conditions)
             ),