' needs escaping

add escaping to strings
boldare · Jun 7, 2019 · eda99ec · eda99ec
1 parent 9047cf8
commit eda99ec
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/QueryBuilder/Visitor/Parameters/StringReplacingStrategy.php b/src/QueryBuilder/Visitor/Parameters/StringReplacingStrategy.php
@@ -11,6 +11,6 @@ public function isApplicable(Type $type): bool
 
     public function replace($value): string
     {
-        return sprintf('\'%s\'', $value);
+        return sprintf('\'%s\'', preg_quote($value, '\''));
     }
 }