use safe query

bohdand-weka · bohdand-weka · commit 5a1d685c479a · 2024-07-08T12:51:14.000+03:00
diff --git a/orm/query.go b/orm/query.go
@@ -366,7 +366,7 @@ func (q *Query) AppendColumn(columns ...string) *Query {
 	t := q.tableModel.Table()
 	if q.columns == nil {
 		for _, f := range t.Fields {
-			q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})
+			q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))
 		}
 	}
 	return q.Column(columns...)
@@ -378,7 +378,7 @@ func (q *Query) AppendColumnExpr(expr string, params ...interface{}) *Query {
 	t := q.tableModel.Table()
 	if q.columns == nil {
 		for _, f := range t.Fields {
-			q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})
+			q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))
 		}
 	}
 	return q.ColumnExpr(expr, params...)

Original file line number	Diff line number	Diff line change
`@@ -366,7 +366,7 @@ func (q Query) AppendColumn(columns ...string) Query {`
`366`	`366`	`t := q.tableModel.Table()`
`367`	`367`	`if q.columns == nil {`
`368`	`368`	`for _, f := range t.Fields {`
`369`		`- q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})`
	`369`	`+ q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))`
`370`	`370`	`}`
`371`	`371`	`}`
`372`	`372`	`return q.Column(columns...)`
`@@ -378,7 +378,7 @@ func (q Query) AppendColumnExpr(expr string, params ...interface{}) Query {`
`378`	`378`	`t := q.tableModel.Table()`
`379`	`379`	`if q.columns == nil {`
`380`	`380`	`for _, f := range t.Fields {`
`381`		`- q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})`
	`381`	`+ q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))`
`382`	`382`	`}`
`383`	`383`	`}`
`384`	`384`	`return q.ColumnExpr(expr, params...)`