diff --git a/laravel/database.php b/laravel/database.php index c5e28ac2..60fd09d1 100644 --- a/laravel/database.php +++ b/laravel/database.php @@ -124,6 +124,19 @@ class Database { { return new Expression($value); } + + /** + * Escape a string for usage in a query. + * + * This uses the correct quoting mechanism for the default database connection. + * + * @param string $value + * @return string + */ + public static function escape($value) + { + return static::connection()->pdo->quote($value); + } /** * Get the profiling data for all queries. diff --git a/laravel/profiling/profiler.php b/laravel/profiling/profiler.php index a26396ee..fe4397e5 100644 --- a/laravel/profiling/profiler.php +++ b/laravel/profiling/profiler.php @@ -145,7 +145,7 @@ class Profiler { { foreach ($bindings as $binding) { - $binding = Database::connection()->pdo->quote($binding); + $binding = Database::escape($binding); $sql = preg_replace('/\?/', $binding, $sql, 1); $sql = htmlspecialchars($sql);