Prévention des injections SQL dans Prestashop 1.1

gistfile1.aw

<?php
// classes/Db.php
abstract class Db
{
	//[…]
    private static $_blacklist = 'LOAD_FILE|UNION|OUTFILE|DUMPFILE|ESCAPED|TERMINATED|CASCADE|INFILE|X509|TRIGGER|REVOKE';
	//[…]      
}