Skip to content

Commit 94160e4

Browse files
committed
docs: make warning more precise
1 parent d6f363c commit 94160e4

1 file changed

Lines changed: 5 additions & 6 deletions

File tree

user_guide_src/source/database/query_builder.rst

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -148,7 +148,7 @@ Since v4.2.0, ``$builder->select()`` accepts a ``CodeIgniter\Database\RawSql`` i
148148

149149
.. literalinclude:: query_builder/099.php
150150

151-
.. warning:: When you use ``RawSql``, you MUST escape the data manually. Failure to do so could result in SQL injections.
151+
.. warning:: When you use ``RawSql``, you MUST escape the values and protect the identifiers manually. Failure to do so could result in SQL injections.
152152

153153
$builder->selectMax()
154154
---------------------
@@ -265,7 +265,7 @@ Since v4.2.0, ``$builder->join()`` accepts a ``CodeIgniter\Database\RawSql`` ins
265265

266266
.. literalinclude:: query_builder/102.php
267267

268-
.. warning:: When you use ``RawSql``, you MUST escape the data manually. Failure to do so could result in SQL injections.
268+
.. warning:: When you use ``RawSql``, you MUST escape the values and protect the identifiers manually. Failure to do so could result in SQL injections.
269269

270270
*************************
271271
Looking for Specific Data
@@ -322,8 +322,7 @@ methods:
322322

323323
.. literalinclude:: query_builder/026.php
324324

325-
.. warning:: If you are using user-supplied data within the string, you MUST escape the
326-
data manually. Failure to do so could result in SQL injections.
325+
.. warning:: If you are using user-supplied data within the string, you MUST escape the values and protect the identifiers manually. Failure to do so could result in SQL injections.
327326

328327
.. literalinclude:: query_builder/027.php
329328

@@ -336,7 +335,7 @@ methods:
336335

337336
.. literalinclude:: query_builder/100.php
338337

339-
.. warning:: When you use ``RawSql``, you MUST escape the data manually. Failure to do so could result in SQL injections.
338+
.. warning:: When you use ``RawSql``, you MUST escape the values and protect the identifiers manually. Failure to do so could result in SQL injections.
340339

341340
.. _query-builder-where-subquery:
342341

@@ -451,7 +450,7 @@ searches.
451450

452451
.. literalinclude:: query_builder/101.php
453452

454-
.. warning:: When you use ``RawSql``, you MUST escape the data manually. Failure to do so could result in SQL injections.
453+
.. warning:: When you use ``RawSql``, you MUST escape the values and protect the identifiers manually. Failure to do so could result in SQL injections.
455454

456455
$builder->orLike()
457456
------------------

0 commit comments

Comments
 (0)