12345678910111213141516171819202122232425262728293031 |
- --TEST--
- PostgreSQL pg_insert() - test for CVE-2015-1532
- --EXTENSIONS--
- pgsql
- --SKIPIF--
- <?php include("skipif.inc"); ?>
- --FILE--
- <?php
- include('config.inc');
- $conn = pg_connect($conn_str);
- foreach (array('', '.', '..') as $table) {
- try {
- var_dump(pg_insert($conn, $table, array('id' => 1, 'id2' => 1)));
- } catch (\ValueError $e) {
- echo $e->getMessage() . \PHP_EOL;
- }
- }
- ?>
- Done
- --EXPECTF--
- pg_insert(): Argument #2 ($table_name) cannot be empty
- Warning: pg_insert(): The table name must be specified in %s on line %d
- bool(false)
- Warning: pg_insert(): The table name must be specified in %s on line %d
- bool(false)
- Done
|