From e63ba580b34fd9cc934f9c09bfc4cab4ecfbc994 Mon Sep 17 00:00:00 2001
From: Peter Rotich <peter@osticket.com>
Date: Mon, 24 Oct 2016 22:41:25 +0000
Subject: [PATCH] ORM cast object to string
db_real_escape expects a string
---
include/class.orm.php | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/include/class.orm.php b/include/class.orm.php
index 626f78eb1..1f37f679b 100644
--- a/include/class.orm.php
+++ b/include/class.orm.php
@@ -3109,12 +3109,11 @@ class MySqlPreparedExecutor {
case is_int($p):
case is_float($p):
return $p;
-
case $p instanceof DateTime:
$p = $p->format('Y-m-d H:i:s');
default:
- return db_real_escape($p, true);
- }
+ return db_real_escape((string) $p, true);
+ }
}, $this->sql);
}
}
--
GitLab