{"issue":{"created_at":"2011-11-28T17:24:45Z","state":"open","updated_at":"2011-11-28T17:24:47Z","user":{"gravatar_id":"256406243346b9253f8610fb1d1e05f6","id":1215373,"url":"https://api.github.com/users/importer","avatar_url":"https://secure.gravatar.com/avatar/256406243346b9253f8610fb1d1e05f6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"importer"},"comments":2,"body":"This can result in SQL Errors by using column names like \"pre-part\" and security issues.\n\nCan be found at line 392 in Form.php:\n\n```\n// Fields\nforeach ($arrSubmitted as $k=>$v)\n{\n  if ($k \n\n![](= 'cc' && $k )= 'id')\n  {\n    $arrSet[$k] = $v;\n  }\n}\n```\n\nPossible Solution (already tested):\n\n```\n// Fields\nforeach ($arrSubmitted as $k=>$v)\n{\n  if ($k \n\n![](= 'cc' && $k )= 'id')\n  {\n    $arrSet['`'.$k.'`'] = $v;\n  }\n}\n```\n\n--- _Originally created by anonymous on June 4th, 2009, at 08:11pm (ID 773)_","assignee":{"gravatar_id":"87d2e5aefadcb310f9155df28c2b3582","id":1192057,"url":"https://api.github.com/users/leofeyer","avatar_url":"https://secure.gravatar.com/avatar/87d2e5aefadcb310f9155df28c2b3582?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"leofeyer"},"id":2370528,"labels":[{"name":"Defect","color":"bd2c00","url":"https://api.github.com/repos/contao/test/labels/Defect"},{"name":"frontend","color":"e6e6e6","url":"https://api.github.com/repos/contao/test/labels/frontend"},{"name":"Invalid","color":"ffdd00","url":"https://api.github.com/repos/contao/test/labels/Invalid"}],"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"number":773,"title":"SQL Columns are not escaped in Form.php when saving form data","closed_at":null,"html_url":"https://github.com/contao/test/issues/773","url":"https://api.github.com/repos/contao/test/issues/773","milestone":null},"action":"created","comment":{"created_at":"2011-11-28T17:24:47Z","updated_at":"2011-11-28T17:24:47Z","user":{"gravatar_id":"87d2e5aefadcb310f9155df28c2b3582","id":1192057,"url":"https://api.github.com/users/leofeyer","avatar_url":"https://secure.gravatar.com/avatar/87d2e5aefadcb310f9155df28c2b3582?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"leofeyer"},"body":"--- _Originally closed on June 13th, 2009, at 02:07pm_","id":2902712,"url":"https://api.github.com/repos/contao/test/issues/comments/2902712"}}