fix db regexp
This commit is contained in:
@@ -315,14 +315,14 @@ class Installer
|
||||
$pdo = $this->getDatabaseHelper()
|
||||
->createPdoConnection($params, true);
|
||||
|
||||
$dbname = preg_replace('/[^A-Za-z0-9_]+/', '', $params['dbname']);
|
||||
$dbname = preg_replace('/[^A-Za-z0-9_\-@$#\(\)]+/', '', $params['dbname']);
|
||||
|
||||
if ($dbname !== $params['dbname']) {
|
||||
throw new Exception("Bad database name.");
|
||||
}
|
||||
|
||||
$pdo->query(
|
||||
"CREATE DATABASE IF NOT EXISTS `" . $dbname . "`"
|
||||
"CREATE DATABASE IF NOT EXISTS `{$dbname}`"
|
||||
);
|
||||
|
||||
return $this->checkDatabaseConnection($params, false);
|
||||
@@ -335,7 +335,7 @@ class Installer
|
||||
}
|
||||
|
||||
/**
|
||||
* Save data
|
||||
* Save data.
|
||||
*
|
||||
* @param array $database
|
||||
* array(
|
||||
@@ -344,7 +344,7 @@ class Installer
|
||||
* 'dbname' => 'espocrm_test',
|
||||
* 'user' => 'root',
|
||||
* 'password' => '',
|
||||
* ),
|
||||
* )
|
||||
* @param string $language
|
||||
* @return bool
|
||||
*/
|
||||
|
||||
Reference in New Issue
Block a user