Escape schema name when setting search_path

alexismeneses · Oct 14, 2014 · e708385 · e708385
1 parent 6be85f8
commit e708385
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/org/postgresql/jdbc2/AbstractJdbc2Connection.java b/org/postgresql/jdbc2/AbstractJdbc2Connection.java
@@ -1307,7 +1307,11 @@ public void setSchema(String schema) throws SQLException
         {
             if (schema != null)
             {
-                stmt.executeUpdate("SET SESSION search_path TO '" + schema + "'");
+                StringBuffer sb = new StringBuffer();
+                sb.append("SET SESSION search_path TO '");
+                Utils.appendEscapedLiteral(sb, schema, protoConnection.getStandardConformingStrings());
+                sb.append("'");
+                stmt.executeUpdate(sb.toString());
             }
             else
             {