|
| 1 | +Function SQLlib_SQLUpdate_RunAllTests() |
| 2 | + Result = True |
| 3 | + Dim MyUpdate As SQLUpdate |
| 4 | + Dim Interfaced As iSQLQuery |
| 5 | + Set MyUpdate = Create_SQLUpdate |
| 6 | + With MyUpdate |
| 7 | + .Table = "users" |
| 8 | + .Fields = Array("username") |
| 9 | + .Values = Array(str("admin' WHERE id=1;DROP TABLE users;")) |
| 10 | + .AddWhere "id", 1 |
| 11 | + End With |
| 12 | + Set Interfaced = MyUpdate |
| 13 | + Result = Result And AssertObjectStringEquals(Interfaced, "UPDATE users SET username='admin'' WHERE id=1;DROP TABLE users;' WHERE id=1") |
| 14 | + SQLlib_SQLUpdate_RunAllTests = Result |
| 15 | +End Function |
0 commit comments