?
avatar PhilETaylor
PhilETaylor
4 Jul 2020

Steps to reproduce the issue

Joomla 4
Enable debug mode
Refresh any admin page
Go to queries tab

Expected result

The queries shown contain all the values in order that they can be copy and pasted

Eg:
Screenshot 2020-07-04 at 11 55 44

Actual result

The queries contain their pre-processed placeholders and not the actual values, making it impossible to debug as you dont know the values that were in the sql query

Screenshot 2020-07-04 at 11 55 13

avatar PhilETaylor PhilETaylor - open - 4 Jul 2020
avatar joomla-cms-bot joomla-cms-bot - change - 4 Jul 2020
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 4 Jul 2020
avatar PhilETaylor
PhilETaylor - comment - 4 Jul 2020

This also makes the duplicate count incorrect I think as its comparing queries with placeholders and not queries with values actually used

avatar chmst
chmst - comment - 4 Jul 2020
avatar joomla-cms-bot joomla-cms-bot - edited - 4 Jul 2020
avatar chmst chmst - change - 4 Jul 2020
Status New Duplicate Report
Closed_Date 0000-00-00 00:00:00 2020-07-04 11:01:42
Closed_By chmst
avatar joomla-cms-bot joomla-cms-bot - change - 4 Jul 2020
Status Duplicate Report Closed
Closed_By chmst joomla-cms-bot
avatar joomla-cms-bot joomla-cms-bot - close - 4 Jul 2020
avatar joomla-cms-bot
joomla-cms-bot - comment - 4 Jul 2020

Set to "closed" on behalf of @chmst by The JTracker Application at issues.joomla.org/joomla-cms/29951

avatar PhilETaylor
PhilETaylor - comment - 4 Jul 2020

#28852 is completely unrelated.

avatar MrTobyDog
MrTobyDog - comment - 5 Oct 2021

This still seems to be present in Joomla 4.0.3 and as the original poster stated makes it almost impossible to debug withou changing the code with lots of echo statements
Whilst the params button does show the parameters used it is s fair bit of work cutting and pasting if you want to replicate the statement for testing in phpMyAdmin

avatar chmst
chmst - comment - 5 Oct 2021

It is intended. This is why prepared statements increase the security of the system.

avatar MrTobyDog
MrTobyDog - comment - 5 Oct 2021

I understand that. But if I have debug on I can see the SQL statement with
placeholders. I can also see the parameters so with a bit of "cut and
paste" it is possible to recreate the statement and test it in phpMyAdmin.
This is often useful when debugging.

So my question really I guess is can we have the option to see the SQL
statement with the values filled in - I do not see how this will compromise
the system.

On Tue, 5 Oct 2021 at 18:04, Christiane Maier-Stadtherr <
@.***> wrote:

It is intended. This is why prepared statements increase the security of
the system.


You are receiving this because you commented.
Reply to this email directly, view it on GitHub
#29951 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABUEV557JEOEKN6WESLUX5LUFKPPPANCNFSM4OQLC5EA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

Add a Comment

Login with GitHub to post a comment