prevent the use of not countable parameters in prepared statemant rendering

This commit is contained in:
Daniel Seifert 2021-04-29 15:49:20 +02:00
parent f6f9ddc7e7
commit b76507025e
Signed by: DanielS
GPG Key ID: 8A7C4C6ED1915C6F
1 changed files with 2 additions and 1 deletions

View File

@ -70,10 +70,11 @@ class OxidSQLLogger implements SQLLogger
* @param array $params
* @throws \OxidEsales\Eshop\Core\Exception\DatabaseConnectionException
*/
public function getPreparedStatementQuery(&$sql, array $params = null)
public function getPreparedStatementQuery(&$sql, $params = [])
{
if (class_exists(d3database::class)
&& method_exists(d3database::class, 'getPreparedStatementQuery')
&& is_array($params)
&& count($params)
&& ($query = d3database::getInstance()->getPreparedStatementQuery($sql, $params))
&& strlen(trim($query))