Phpwind latest SQL Injection controllable Program

Class WindMysqlPdoAdapter extends AbstractWindPdoAdapter {/* (non-PHPdoc) * @ see AbstractWindPdoAdapter: setCharset () */public function setCharset ($ charset) {$ charset & $ this-> query ("set names ". $ this-> quote ($ charset ). ";");}/** create a data table ** to add a data table. Three parameters are supported: 'Data indication, field definition, and whether to overwrite the existing Table '. for example, '$ values' throws an exception when the data table name is undefined, The 'fields' field is undefined, or the data table name is null: * $ values = array (* 'fields' => "'id' smallint (5) unsigned not null auto_increment, * 'name' varchar (30) not null default '', primary key ('id') ", * 'charset' =>" UTF-8 ", * 'autosecret' => 'id', * 'engine' => 'innerdb '); * <note> <B> note: </B> the last parameter '$ replace' has two values: true and false ', if the value is false, it indicates that no new table is created if the data table exists, * If the value is true, delete an existing data table and create a new table <te> ** @ param string $ tableName data table name * @ param string | array $ values data table field information * @ param boolean $ replace if the table already exists, receive two values: true | false * @ see AbstractWindPdoAdapter: createTable () * @ return boolean * @ throws WindDbException

 

You can't see $ charset & $ this-> query ("set names ". $ this-> quote ($ charset ). ";"); this is the pace of Character Set problems! Solution:

Thank you! Remember to send money.