fix: Add escape to column name when creating like.

Tetsuro Yoshikawa · Tetsuro Yoshikawa · commit 251f68635c47 · 2020-01-14T15:24:49.000+09:00
diff --git a/system/Database/BaseBuilder.php b/system/Database/BaseBuilder.php
@@ -1250,7 +1250,7 @@ protected function _like($field, string $match = '', string $type = 'AND ', stri
 				$bind = $this->setBind($k, "%$v%", $escape);
 			}
 
-			$like_statement = $this->_like_statement($prefix, $k, $not, $bind, $insensitiveSearch);
+			$like_statement = $this->_like_statement($prefix, $this->db->protectIdentifiers($k, false, $escape), $not, $bind, $insensitiveSearch);
 
 			// some platforms require an escape sequence definition for LIKE wildcards
 			if ($escape === true && $this->db->likeEscapeStr !== '')

Original file line number	Diff line number	Diff line change
`@@ -1250,7 +1250,7 @@ protected function _like($field, string $match = '', string $type = 'AND ', stri`
`1250`	`1250`	`$bind = $this->setBind($k, "%$v%", $escape);`
`1251`	`1251`	`}`
`1252`	`1252`
`1253`		`- $like_statement = $this->_like_statement($prefix, $k, $not, $bind, $insensitiveSearch);`
	`1253`	`+ $like_statement = $this->_like_statement($prefix, $this->db->protectIdentifiers($k, false, $escape), $not, $bind, $insensitiveSearch);`
`1254`	`1254`
`1255`	`1255`	`// some platforms require an escape sequence definition for LIKE wildcards`
`1256`	`1256`	`if ($escape === true && $this->db->likeEscapeStr !== '')`