Nette\Database weird auto escaping

[matopeto]

$source->where("DATE_FORMAT(`timestamp`, '%Y-%m') = ?", $value);

is translated to:

WHERE (DATE_FORMAT(`timestamp`, '%Y-%`m`') = ?) 

(m is wrongly escaped)

But if I change quotes and double quotes:

$source->where('DATE_FORMAT(`timestamp`, "%Y-%m") = ?', $value);

output is correct

WHERE (DATE_FORMAT(`timestamp`, "%Y-%m") = ?) 

Both wheres should generate correct (2nd) expression.

[hrach]

Well, you should use this

$source->where("DATE_FORMAT(`timestamp`, ?) = ?", '%Y-%m', $value);

it works with quotes only because it's column delimeter in postgre. This isses is tracked in #1112.

[matopeto]

Ok, but maybe it should by denied and throwing an exception.

[matopeto]

And how is correct way to escape strings in order? (Order method doesn't extra parameter to handles "?")

$source->order("FIELD(`state`, 'new', 'edited', 'deleted', 'public')")

is translated to:

ORDER BY FIELD(`state`, '`new`', '`edited`', '`deleted`', '`public`')

Of course, strings in double quotes works.

But I would like write someting like this:

$source->order('FIELD(`state`, ?, ?, ?, ?)', "new", "edited", "deleted", "public")

[hrach]

it should work...

$source->order('FIELD(`state`, ?, ?, ?, ?)', "new", "edited", "deleted", "public")

[matopeto]

Ok thanks, I see, in 2.1 :) but in nette 2.0.x it is not :)

[hrach]

yes :)