Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
epallerols for the patch.
|
|
|
|
|
|
$this->db->select(), column names in subsequent queries would not be properly escaped.
|
|
attack vector when multi-byte character set connections are employed. (Does not impact Latin-1, UTF-8, etc. encodings)
|
|
constant as deprecated. Use ".php" instead. Also adding upgrade notes from 2.0.2 to 2.0.3.
|
|
|
|
stop environment checks.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
db_select
|
|
|
|
sqlsrv_driver.php
|
|
|
|
insert/update.
|
|
|
|
|
|
|
|
with backticks (`) so fields like "default" and "order" will not cause SQL errors.
|
|
|
|
|
|
environment first.
|
|
|
|
|
|
|
|
|
|
numeric, enum and set.
|
|
Gifford for the patch. http://codeigniter.com/forums/viewthread/73392/
|
|
aren't changing the name.
|
|
together nicely. Removed all instantiations by reference.
|
|
|
|
|
|
|
|
and line number of the failed query.
|
|
utility drivers.
|
|
groupby, orhaving, orderby, getwhere.
|
|
due to a function being moved from the input to security class.
Moving remove_invisible_characters() to Common.php so the entire class does not need to be instantiated in those database drivers.
|
|
|
|
|
|
strict sql during development
|
|
|
|
|
|
|
|
|