Updated Drupal to 8.6. This goes with the following updates because it's possible...

[yaffs-website] / web / core / lib / Drupal / Core / Database / Driver / mysql / Insert.php

diff --git a/web/core/lib/Drupal/Core/Database/Driver/mysql/Insert.php b/web/core/lib/Drupal/Core/Database/Driver/mysql/Insert.php
index 8b7c602e872184ed15c46a815f2c8fb76df2add5..3d397c527545c88b5eed4c4f7dd9537a2f13f764 100644 (file)
--- a/web/core/lib/Drupal/Core/Database/Driver/mysql/Insert.php
+++ b/web/core/lib/Drupal/Core/Database/Driver/mysql/Insert.php
@@ -44,6 +44,10 @@ class Insert extends QueryInsert {
     // Default fields are always placed first for consistency.
     $insert_fields = array_merge($this->defaultFields, $this->insertFields);
 
+    $insert_fields = array_map(function ($field) {
+      return $this->connection->escapeField($field);
+    }, $insert_fields);
+
     // If we're selecting from a SelectQuery, finish building the query and
     // pass it back, as any remaining options are irrelevant.
     if (!empty($this->fromQuery)) {