Merge pull request #2 from martingtheodo/fix/postgres-connection

fix(database-activator): paramametrize sql query to avoid postgres error
playox · May 27, 2021 · d7e13f4 · d7e13f4
2 parents e152fad + a4924d1
commit d7e13f4
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/Activator/DatabaseActivator.php b/src/Activator/DatabaseActivator.php
@@ -91,12 +91,12 @@ public function isActive($name, Context $context): bool
         // $result contains the response from state (true / false) or false if no feature found
         $result = $this->getConnection()->executeQuery(
             sprintf(
-                'SELECT %s FROM %s WHERE %s = "%s"',
+                'SELECT %s FROM %s WHERE %s = :feature_name',
                 $this->options['db_column_state'],
                 $this->options['db_table'],
                 $this->options['db_column_feature'],
-                $name
-            )
+            ),
+            ['feature_name' => $name]
         )->fetchOne();
 
         return is_bool($result) ? $result : filter_var($result, FILTER_VALIDATE_BOOLEAN);