Merge pull request #965 from brandung-sjorek/fix/escape-username-and-…

…password-in-mysql-command/latest
TYPO3-Console · Feb 22, 2021 · caef614 · caef614
2 parents d544baf + f14bf1d
commit caef614
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Classes/Console/Database/Process/MysqlCommand.php b/Classes/Console/Database/Process/MysqlCommand.php
@@ -141,10 +141,10 @@ private function createTemporaryMysqlConfigurationFile()
         $userDefinition = '';
         $passwordDefinition = '';
         if (!empty($this->dbConfig['user'])) {
-            $userDefinition = sprintf('user="%s"', $this->dbConfig['user']);
+            $userDefinition = sprintf('user="%s"', addcslashes($this->dbConfig['user'], '"\\'));
         }
         if (!empty($this->dbConfig['password'])) {
-            $passwordDefinition = sprintf('password="%s"', $this->dbConfig['password']);
+            $passwordDefinition = sprintf('password="%s"', addcslashes($this->dbConfig['password'], '"\\'));
         }
         $confFileContent = <<<EOF
 [mysqldump]