From 9b623a2b2b63dfd3b4472c0a868311871ede280e Mon Sep 17 00:00:00 2001 From: Damian Mooyman Date: Fri, 16 Nov 2012 14:40:10 +1300 Subject: [PATCH] BUG Unescaped underscore in query unintentionally hid any table beginning with 'SQL' or 'PG' --- code/PostgreSQLDatabase.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/PostgreSQLDatabase.php b/code/PostgreSQLDatabase.php index 7cfb76d..fa0b087 100644 --- a/code/PostgreSQLDatabase.php +++ b/code/PostgreSQLDatabase.php @@ -1264,7 +1264,7 @@ class PostgreSQLDatabase extends SS_Database { public function tableList() { $schema_SQL = pg_escape_string($this->dbConn, $this->schema); $tables=array(); - foreach($this->query("SELECT tablename FROM pg_catalog.pg_tables WHERE schemaname = '{$schema_SQL}' AND tablename NOT ILIKE 'pg_%' AND tablename NOT ILIKE 'sql_%'") as $record) { + foreach($this->query("SELECT tablename FROM pg_catalog.pg_tables WHERE schemaname = '{$schema_SQL}' AND tablename NOT ILIKE 'pg\_%' AND tablename NOT ILIKE 'sql\_%'") as $record) { //$table = strtolower(reset($record)); $table = reset($record); $tables[$table] = $table;