fix: escape identifier for Postgre's DEALLOCATE statement

fpoy · fpoy · commit a4e2442b2ace · 2022-10-11T14:21:26.000+02:00
diff --git a/system/Database/Postgre/PreparedQuery.php b/system/Database/Postgre/PreparedQuery.php
@@ -100,7 +100,7 @@ public function _close(): bool
     {
         $error = true;
         if (isset($this->statement)) {
-            $error = (bool) pg_query($this->db->connID, 'DEALLOCATE ' . $this->name);
+            $error = (bool) pg_query($this->db->connID, 'DEALLOCATE "' . $this->db->escapeIdentifiers($this->name) . '"');
             unset($this->statement);
         }
 

Original file line number	Diff line number	Diff line change
`@@ -100,7 +100,7 @@ public function _close(): bool`
`100`	`100`	`{`
`101`	`101`	`$error = true;`
`102`	`102`	`if (isset($this->statement)) {`
`103`		`- $error = (bool) pg_query($this->db->connID, 'DEALLOCATE ' . $this->name);`
	`103`	`+ $error = (bool) pg_query($this->db->connID, 'DEALLOCATE "' . $this->db->escapeIdentifiers($this->name) . '"');`
`104`	`104`	`unset($this->statement);`
`105`	`105`	`}`
`106`	`106`