No quotes when field type is int

[OlafvdSpek]

https://demo.phpmyadmin.net/QA_4_9/tbl_select.php?db=sakila&table=actor

SELECT * FROM `actor` WHERE `actor_id` = test LIMIT 0, 25 :(

I think it should put quotes around test..

[williamdes]

@OlafvdSpek Why ?

[OlafvdSpek]

Because otherwise it's interpreted as a column name.

[OlafvdSpek]

Why was this closed?

[williamdes]

Okay, now a screenshot is a minimum, I found a way to reproduce this.
And the real issue is that you should no allow the user to enter a string, like it is done on the Insert page

Search

Insert

[OlafvdSpek]

I think this isn't just an UI issue. Backend should also validate / quote.

[rahgurung]

Can someone help me reproduce this error?

[williamdes]

@gurrrung

First create a table with a int type

CREATE TABLE `test-13326` (
  `abc` int(11) NOT NULL
) ENGINE=InnoDB;

Go to "Search"

Fill the field with a string and submit

it's interpreted as a column name.

Expected behavior

Add quotes or forbid using non integer values