Commit d7dfd4f9 authored by Franz Liedke's avatar Franz Liedke

Use DB::escape() shortcut in profiler.

parent 1081ac1b
...@@ -145,7 +145,7 @@ class Profiler { ...@@ -145,7 +145,7 @@ class Profiler {
{ {
foreach ($bindings as $binding) foreach ($bindings as $binding)
{ {
$binding = Database::connection()->pdo->quote($binding); $binding = Database::escape($binding);
$sql = preg_replace('/\?/', $binding, $sql, 1); $sql = preg_replace('/\?/', $binding, $sql, 1);
$sql = htmlspecialchars($sql); $sql = htmlspecialchars($sql);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment