Skip to content

PdoSessionHandler not escaping identifiers #11131

@INSEAD-asim

Description

@INSEAD-asim

Hi,
I am using Symfony 2.3.15. I encounter following bugs when I try to implement PdoSessionHandler. I override my own class to overcome following issues. Unfortunately, the library not even throwing any exceptions for these issues.

  1. Table names and Field Names are not escaped so it is not accepting any keyword.
  2. Binding parameter "time" is keyword in MS SQL so it is not working.
  3. Queries are not concatenated using sprintf().
  4. MERGE statement is not working for MS SQL so I had to use default DELETE and INSERT.

Regards,
Asim

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions