public function ParameterTest::testBadKeysInArrayArguments in Drupal driver for SQL Server and SQL Azure 8.2

Same name and namespace in other branches

1. 4.2.x tests/src/Kernel/ParameterTest.php \Drupal\Tests\sqlsrv\Kernel\ParameterTest::testBadKeysInArrayArguments()
2. 3.0.x tests/src/Kernel/ParameterTest.php \Drupal\Tests\sqlsrv\Kernel\ParameterTest::testBadKeysInArrayArguments()
3. 3.1.x tests/src/Kernel/ParameterTest.php \Drupal\Tests\sqlsrv\Kernel\ParameterTest::testBadKeysInArrayArguments()
4. 4.0.x tests/src/Kernel/ParameterTest.php \Drupal\Tests\sqlsrv\Kernel\ParameterTest::testBadKeysInArrayArguments()
5. 4.1.x tests/src/Kernel/ParameterTest.php \Drupal\Tests\sqlsrv\Kernel\ParameterTest::testBadKeysInArrayArguments()

Test for weird key names in array arguments.

Remove any custom code related to this issue, but keep the test.

File

tests/src/Kernel/ParameterTest.php, line 19

Class

ParameterTest

Tests parameter behavior.

Namespace

Drupal\Tests\sqlsrv\Kernel

Code

public function testBadKeysInArrayArguments() {
  $params[':nids'] = [
    'uid1' => -9,
    'What a bad placeholder name, why should we care?' => -6,
  ];
  $result = NULL;
  try {

    // The regular expandArguments implementation will fail to
    // properly expand the associative array with weird keys, OH, and actually
    // you can perform some SQL Injection through the array keys.
    $result = $this->connection
      ->query('SELECT COUNT(*) FROM users WHERE users.uid IN (:nids)', $params)
      ->execute()
      ->fetchField();
  } catch (\Exception $err) {

    // Regular drupal will fail with
    // SQLSTATE[IMSSP]: An error occurred substituting the named parameters.
    // https://www.drupal.org/node/2146839
  }

  // User ID's are negative, so this should return 0 matches.
  $this
    ->assertEqual($result, 0, 'Returned the correct number of total rows.');
}