escape ORDER BY (#71)

may closes #57
tbaddade · Aug 22, 2022 · bbc7268 · bbc7268
1 parent 3cb31fa
commit bbc7268
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Watson/Workflows/YForm/YFormSearch.php b/lib/Watson/Workflows/YForm/YFormSearch.php
@@ -102,7 +102,7 @@ public function fire(Command $command)
                                 SELECT      '.$selectFields.'
                                 FROM        `'.$table.'`
                                 WHERE       '.$command->getSqlWhere($searchFields).'
-                                ORDER BY    '.$orderByField;
+                                ORDER BY    `'.$orderByField.'`';
 
                         $results[$table->getTableName()] = $this->getDatabaseResults($query);
                     }