[eluser]joergy[/eluser]
Hi folks,
having two spaces in a password gives me a headache…
The reason: if you don't pass an array but a sql-expression to $this->db->where() the whole statement is taken as a 'key' (and not a 'value'). DB_active_rec::_where() calls _protect_identifiers() on that 'key' which throws out multiple '\t' and spaces, replacing them by one.
So my password failed…
I suppose it's a good idea to be very careful when using own sql-statements.
There are additional issues concerning backticks in plain sql-statements.
joergy
