typo
This commit is contained in:
parent
04b48ae12b
commit
2ab752bfc3
@ -32,7 +32,7 @@ You can consider the following APIs to be safe from SQL injection:
|
|||||||
- Queries through the Criteria API on ``Doctrine\ORM\PersistentCollection`` and
|
- Queries through the Criteria API on ``Doctrine\ORM\PersistentCollection`` and
|
||||||
``Doctrine\ORM\EntityRepository``.
|
``Doctrine\ORM\EntityRepository``.
|
||||||
|
|
||||||
You are **NOT** save from SQL injection when using user input with:
|
You are **NOT** safe from SQL injection when using user input with:
|
||||||
|
|
||||||
- Expression API of ``Doctrine\ORM\QueryBuilder``
|
- Expression API of ``Doctrine\ORM\QueryBuilder``
|
||||||
- Concatenating user input into DQL SELECT, UPDATE or DELETE statements or
|
- Concatenating user input into DQL SELECT, UPDATE or DELETE statements or
|
||||||
|
Loading…
x
Reference in New Issue
Block a user