lh-ehr icon indicating copy to clipboard operation
lh-ehr copied to clipboard

making Escape Column names function more flexible for different use cases

Open prondubuisi opened this issue 6 years ago • 1 comments

Currently there is a function to escape column names https://github.com/LibreHealthIO/lh-ehr/blob/master/library/formdata.inc.php#L82 but this method is not used extensively because it doesn't cover use cases where the column name is

  1. *

  2. $col1, $col2, $col3 Making the above function flexible will ensure select $cols statements within the code base are properly escaped. I would like to work on this if any other person sees the need to.

prondubuisi avatar Feb 22 '19 16:02 prondubuisi

I think this could be a better function indeed. More importantly, more extensive use would be good, and provide proof-of-concept examples.

aethelwulffe avatar May 10 '19 13:05 aethelwulffe