Skip to content

Tags: wollanup/Propel2

Tags

2.0.0-alpha9

Toggle 2.0.0-alpha9's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Update README.md (propelorm#1585)

2.0.0-alpha8

Toggle 2.0.0-alpha8's commit message
SQL injection fix: Cast limit to integer when setting via Criteria::s…

…etLimit() (propelorm#1465)

* Cast limit to integer when setting via Criteria::setLimit()

This is a followup to a fix for SQL injections with LIMIT clauses in MySQL [1]. That fix only applied to the MySQL adapter, and other existing or future adapters could still be at risk.

By coercing limit inputs to integers upon setting them, we can avoid SQL injection vulnerabilities with `limit()` across all database adapters.

The original code comments implied that integer coercion could be problematic with 32-bit integers, but unit tests in this PR prove otherwise. Even 64-bit integers seem to work fine.

[1] propelorm#1464

* Add missing tests for setOffset()

* Remove note about 32-bit truncation

Unit tests show that even 64-bit integers aren't truncated.

2.0.0-alpha7

Toggle 2.0.0-alpha7's commit message
Fixes propelorm#1324 - fixed wrong sprintf arguments positioning in g…

…etIdentifierPhp()

Related to propelorm#1090.

2.0.0-alpha6

Toggle 2.0.0-alpha6's commit message
Compatibility of numeric and string keys (propelorm#1279)

Compatibility of numeric and string keys

2.0.0-alpha5

Toggle 2.0.0-alpha5's commit message
Merge pull request propelorm#923 from SCIF/external-attribute

External attribute added

2.0.0-alpha4

Toggle 2.0.0-alpha4's commit message
Fixed typo in ConcreteInheritance behavior.

2.0.0-alpha3

Toggle 2.0.0-alpha3's commit message
Merge pull request propelorm#611 from marcj/master

Fixed propelorm#477, Fixed propelorm#607, Fixed propelorm#604, Fixed propelorm#610

2.0.0-alpha2

Toggle 2.0.0-alpha2's commit message
Fix CS

2.0.0-alpha1

Toggle 2.0.0-alpha1's commit message
Update composer, fix propelorm#407