public static function ConditionTest::providerTestCompileWithSqlInjectionForOperator

File

core/tests/Drupal/Tests/Core/Database/ConditionTest.php, line 176

Class

ConditionTest

@coversDefaultClass \Drupal\Core\Database\Query\Condition

Namespace

Code

public static function providerTestCompileWithSqlInjectionForOperator() {
  $data = [];
  $data[] = [
    "IS NOT NULL) ;INSERT INTO {test} (name) VALUES ('test12345678'); -- ",
  ];
  $data[] = [
    "IS NOT NULL) UNION ALL SELECT name, pass FROM {users_field_data} -- ",
  ];
  $data[] = [
    "IS NOT NULL) UNION ALL SELECT name FROM {TEST_UPPERCASE} -- ",
  ];
  $data[] = [
    "= 1 UNION ALL SELECT password FROM user WHERE uid =",
  ];
  return $data;
}