Quote user, password, and dbname in connection string

trowski · trowski · commit b68c4d5929d0 · 2026-02-24T22:47:18.000-06:00
diff --git a/src/PostgresConfig.php b/src/PostgresConfig.php
@@ -153,17 +153,17 @@ public function getConnectionString(): string
 
         $user = $this->getUser();
         if ($user !== null) {
-            $chunks[] = "user=" . $user;
+            $chunks[] = \sprintf("user='%s'", \addslashes($user));
         }
 
         $password = $this->getPassword();
         if ($password !== null) {
-            $chunks[] = "password=" . $password;
+            $chunks[] = \sprintf("password='%s'", \addslashes($password));
         }
 
         $database = $this->getDatabase();
         if ($database !== null) {
-            $chunks[] = "dbname=" . $database;
+            $chunks[] = \sprintf("dbname='%s'", \addslashes($database));
         }
 
         if ($this->sslMode !== null) {

Original file line number	Diff line number	Diff line change
`@@ -153,17 +153,17 @@ public function getConnectionString(): string`
`153`	`153`
`154`	`154`	`$user = $this->getUser();`
`155`	`155`	`if ($user !== null) {`
`156`		`- $chunks[] = "user=" . $user;`
	`156`	`+ $chunks[] = \sprintf("user='%s'", \addslashes($user));`
`157`	`157`	`}`
`158`	`158`
`159`	`159`	`$password = $this->getPassword();`
`160`	`160`	`if ($password !== null) {`
`161`		`- $chunks[] = "password=" . $password;`
	`161`	`+ $chunks[] = \sprintf("password='%s'", \addslashes($password));`
`162`	`162`	`}`
`163`	`163`
`164`	`164`	`$database = $this->getDatabase();`
`165`	`165`	`if ($database !== null) {`
`166`		`- $chunks[] = "dbname=" . $database;`
	`166`	`+ $chunks[] = \sprintf("dbname='%s'", \addslashes($database));`
`167`	`167`	`}`
`168`	`168`
`169`	`169`	`if ($this->sslMode !== null) {`