Quote value before adding to query

bytehead · bytehead · commit 81c1a06ad2fa · 2025-11-19T16:10:14.000+01:00
diff --git a/src/Model/DcaRelationsModel.php b/src/Model/DcaRelationsModel.php
@@ -147,7 +147,7 @@ public static function getRelatedValues(string $table, string $field, mixed $val
             }
         }
 
-        return $connection->fetchFirstColumn('SELECT '.$relation['related_field'].' FROM '.$relation['table'].(!empty($values) ? (' WHERE '.$relation['reference_field']." IN ('".implode("','", $values)."')") : '').$order);
+        return $connection->fetchFirstColumn('SELECT '.$relation['related_field'].' FROM '.$relation['table'].(!empty($values) ? (' WHERE '.$relation['reference_field'].' IN ('.$connection->getDatabasePlatform()->quoteStringLiteral(implode("','", $values)).')') : '').$order);
     }
 
     /**

Original file line number	Diff line number	Diff line change
`@@ -147,7 +147,7 @@ public static function getRelatedValues(string $table, string $field, mixed $val`
`147`	`147`	`}`
`148`	`148`	`}`
`149`	`149`
`150`		`- return $connection->fetchFirstColumn('SELECT '.$relation['related_field'].' FROM '.$relation['table'].(!empty($values) ? (' WHERE '.$relation['reference_field']." IN ('".implode("','", $values)."')") : '').$order);`
	`150`	`+ return $connection->fetchFirstColumn('SELECT '.$relation['related_field'].' FROM '.$relation['table'].(!empty($values) ? (' WHERE '.$relation['reference_field'].' IN ('.$connection->getDatabasePlatform()->quoteStringLiteral(implode("','", $values)).')') : '').$order);`
`151`	`151`	`}`
`152`	`152`
`153`	`153`	`/**`