You are here

public function Connection::escapeField in Zircon Profile 8

Same name in this branch
  1. 8 core/lib/Drupal/Core/Database/Connection.php \Drupal\Core\Database\Connection::escapeField()
  2. 8 core/lib/Drupal/Core/Database/Driver/pgsql/Connection.php \Drupal\Core\Database\Driver\pgsql\Connection::escapeField()
Same name and namespace in other branches
  1. 8.0 core/lib/Drupal/Core/Database/Driver/pgsql/Connection.php \Drupal\Core\Database\Driver\pgsql\Connection::escapeField()

Escapes a field name string.

Force all field names to be strictly alphanumeric-plus-underscore. For some database drivers, it may also wrap the field name in database-specific escape characters.

Parameters

string $field: An unsanitized field name.

Return value

string The sanitized field name.

Overrides Connection::escapeField

File

core/lib/Drupal/Core/Database/Driver/pgsql/Connection.php, line 168
Contains \Drupal\Core\Database\Driver\pgsql\Connection.

Class

Connection
PostgreSQL implementation of \Drupal\Core\Database\Connection.

Namespace

Drupal\Core\Database\Driver\pgsql

Code

public function escapeField($field) {
  $escaped = parent::escapeField($field);

  // Remove any invalid start character.
  $escaped = preg_replace('/^[^A-Za-z0-9_]/', '', $escaped);

  // The pgsql database driver does not support field names that contain
  // periods (supported by PostgreSQL server) because this method may be
  // called by a field with a table alias as part of SQL conditions or
  // order by statements. This will consider a period as a table alias
  // identifier, and split the string at the first period.
  if (preg_match('/^([A-Za-z0-9_]+)"?[.]"?([A-Za-z0-9_.]+)/', $escaped, $parts)) {
    $table = $parts[1];
    $column = $parts[2];

    // Use escape alias because escapeField may contain multiple periods that
    // need to be escaped.
    $escaped = $this
      ->escapeTable($table) . '.' . $this
      ->escapeAlias($column);
  }
  elseif (preg_match('/[A-Z]/', $escaped)) {

    // Quote the field name for case-sensitivity.
    $escaped = '"' . $escaped . '"';
  }
  elseif (in_array(strtolower($escaped), $this->postgresqlReservedKeyWords)) {

    // Quote the field name for PostgreSQL reserved key words.
    $escaped = '"' . $escaped . '"';
  }
  return $escaped;
}