Bug #69362 [Opn->Ver]: PDO-pgsql fails to connect if password contains a leading single quote

Edit report at https://bugs.php.net/bug.php?id=69362&edit=1 ID: 69362 Updated by: mbeccati@php.net Reported by: jon dot dufresne at gmail dot com Summary: PDO-pgsql fails to connect if password contains a leading single quote -Status: Open +Status: Verified Type: Bug Package: PDO PgSQL Operating System: Linux PHP Version: 5.5.23 -Assigned To: +Assigned To: mbeccati Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2015-04-03 00:44:22] jon dot dufresne at gmail dot com Description: ------------ If a PostgreSQL user's password contains a leading single quote (apostrophe) PDO-pgsql is unable to connect to the database as the user. The script fails with the message: PHP Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[08006] [7] unterminated quoted string in connection info string' Test script: --------------- #!/bin/bash echo "Trailing quote" psql postgres -c "DROP DATABASE IF EXISTS testphp" psql postgres -c "DROP ROLE IF EXISTS testphp" psql postgres -c "CREATE ROLE testphp PASSWORD 'asdf''' LOGIN" psql postgres -c "CREATE DATABASE testphp OWNER testphp" php -r "new PDO(\"pgsql:dbname=testphp\", \"testphp\", \"asdf'\");" echo "Leading quote" psql postgres -c "DROP DATABASE IF EXISTS testphp" psql postgres -c "DROP ROLE IF EXISTS testphp" psql postgres -c "CREATE ROLE testphp PASSWORD '''asdf' LOGIN" psql postgres -c "CREATE DATABASE testphp OWNER testphp" php -r "new PDO(\"pgsql:dbname=testphp\", \"testphp\", \"'asdf\");" Expected result: ---------------- PHP can connect to the database no problem. Output from script: $ bash test.sh Trailing quote DROP DATABASE DROP ROLE CREATE ROLE CREATE DATABASE Leading quote DROP DATABASE DROP ROLE CREATE ROLE CREATE DATABASE Actual result: -------------- $ bash test.sh Trailing quote DROP DATABASE DROP ROLE CREATE ROLE CREATE DATABASE Leading quote DROP DATABASE DROP ROLE CREATE ROLE CREATE DATABASE PHP Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[08006] [7] unterminated quoted string in connection info string' in Command line code:1 Stack trace: #0 Command line code(1): PDO->__construct('pgsql:dbname=te...', 'testphp', ''asdf') #1 {main} thrown in Command line code on line 1 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=69362&edit=1