Fix issue where orderBy strips spaces from fieldname

leigh-ols · web-flow · commit 106ff4708448 · 2017-06-06T17:27:43.000+01:00
diff --git a/MysqliDb.php b/MysqliDb.php
@@ -1093,7 +1093,7 @@ public function orderBy($orderByField, $orderbyDirection = "DESC", $customFields
     {
         $allowedDirection = Array("ASC", "DESC");
         $orderbyDirection = strtoupper(trim($orderbyDirection));
-        $orderByField = preg_replace("/[^-a-z0-9\.\(\),_`\*\'\"]+/i", '', $orderByField);
+        $orderByField = preg_replace("/[^ -a-z0-9\.\(\),_`\*\'\"]+/i", '', $orderByField);
 
         // Add table prefix to orderByField if needed.
         //FIXME: We are adding prefix only if table is enclosed into `` to distinguish aliases

Original file line number	Diff line number	Diff line change
`@@ -1093,7 +1093,7 @@ public function orderBy($orderByField, $orderbyDirection = "DESC", $customFields`
`1093`	`1093`	`{`
`1094`	`1094`	`$allowedDirection = Array("ASC", "DESC");`
`1095`	`1095`	`$orderbyDirection = strtoupper(trim($orderbyDirection));`
`1096`		- $orderByField = preg_replace("/[^-a-z0-9\.\(\),_`\*\'\"]+/i", '', $orderByField);
	`1096`	+ $orderByField = preg_replace("/[^ -a-z0-9\.\(\),_`\*\'\"]+/i", '', $orderByField);
`1097`	`1097`
`1098`	`1098`	`// Add table prefix to orderByField if needed.`
`1099`	`1099`	//FIXME: We are adding prefix only if table is enclosed into `` to distinguish aliases