pdb

pdb copied to clipboard

H2Engine persist method useAutoInc incorrect usage

1

Similar issue is found on other implementations. See: https://github.com/feedzai/pdb/blob/6fd034a710ef0a8ddb45de31b96a2308683e6d9a/src/main/java/com/feedzai/commons/sql/abstraction/engine/impl/H2Engine.java#L520-L524

tnovo

HiuKwok

In addition to the already existent network timeouts, add support for timeouts on query execution, i.e., expose Statement#setQueryTimeout() in the pdb API.

leitaop

[MySQL] Pdb incorrectly escapes queries with backslash

4

When performing a query to the database (using mysql backend): ```java Query q = select(all()) .from(table("table")) .where(eq("id", k("my\id")); engine.query(q); ``` pdb incorrectly escapes the query to ```sql SELECT * FROM...

tnovo

It is not possible do declare an entity with a custom constraint (for example 3 columns as a constraint) without using a primary key.

jrrbarros

This error appears with a more recent version of MySQL driver (8.0.11)

jrrbarros

The expected behavior of `DatabaseEngine.updateEntity`, with schema policy create, is that if the entity does not need to be updated no DDL is executed; however, the current implementation (in `AbstractDatabaseEngine`)...

fdz-joaomiguel

Possible SQL Injection flaw

1

Hello, I'd like to understand in which scenarios we think using an object's "toString" is a valid conversion for a constant parameter, because it could lead to SQL Injection: https://github.com/feedzai/pdb/blob/master/src/main/java/com/feedzai/commons/sql/abstraction/engine/AbstractTranslator.java#L245

bugflux

There should be a way to create an index for an already existing table

4

orium

PDB doesn't know how to translate update statements containing blobs

2

It will build a statement by calling `toString()` on the object yielding something like This problem doesn't happen if prepared statements are used.

orium