fix: escape identifier for Postgre's DEALLOCATE statement

fpoy · fpoy · commit 3bd2a2466186 · 2022-10-11T15:46:32.000+02:00
diff --git a/system/Database/Postgre/PreparedQuery.php b/system/Database/Postgre/PreparedQuery.php
@@ -105,7 +105,7 @@ public function _close(): bool
     {
         $error = true;
         if (isset($this->statement)) {
-            $error = (bool) pg_query($this->db->connID, 'DEALLOCATE ' . $this->name);
+            $error = (bool) pg_query($this->db->connID, 'DEALLOCATE "' . $this->db->escapeIdentifiers($this->name) . '"');
             unset($this->statement);
         }
 

Original file line number	Diff line number	Diff line change
`@@ -105,7 +105,7 @@ public function _close(): bool`
`105`	`105`	`{`
`106`	`106`	`$error = true;`
`107`	`107`	`if (isset($this->statement)) {`
`108`		`- $error = (bool) pg_query($this->db->connID, 'DEALLOCATE ' . $this->name);`
	`108`	`+ $error = (bool) pg_query($this->db->connID, 'DEALLOCATE "' . $this->db->escapeIdentifiers($this->name) . '"');`
`109`	`109`	`unset($this->statement);`
`110`	`110`	`}`
`111`	`111`