1
0
mirror of synced 2025-02-02 21:41:45 +03:00
This commit is contained in:
radmax 2016-06-22 17:06:16 +02:00 committed by GitHub
parent 04b48ae12b
commit 2ab752bfc3

View File

@ -32,7 +32,7 @@ You can consider the following APIs to be safe from SQL injection:
- Queries through the Criteria API on ``Doctrine\ORM\PersistentCollection`` and - Queries through the Criteria API on ``Doctrine\ORM\PersistentCollection`` and
``Doctrine\ORM\EntityRepository``. ``Doctrine\ORM\EntityRepository``.
You are **NOT** save from SQL injection when using user input with: You are **NOT** safe from SQL injection when using user input with:
- Expression API of ``Doctrine\ORM\QueryBuilder`` - Expression API of ``Doctrine\ORM\QueryBuilder``
- Concatenating user input into DQL SELECT, UPDATE or DELETE statements or - Concatenating user input into DQL SELECT, UPDATE or DELETE statements or