MySQL Problem

[dizlexik]

I'm creating a simple select statement with rel and trying to execute it on MySQL but I can't seem to get it to work.
It seems to have to do with rel's use of double quotes everywhere.
My simple rel code is mytable.project(rel.star()).where(mytable.column('name').eq('test')).toSql() and I get a SQL statement of SELECT * FROM "mytable" WHERE "mytable"."name" = "test"
MySQL gives me an error of Unknown column 'test' in 'where clause'
Is there anything I can do to resolve this? I've tried setting the sql_mode in MySQL to just about every possible mode but nothing works.

[rednaxus]

yes, i get this too, would be nice to fix this

[granthusbands]

The problem is in the last line of @quote (currently line 179) of lib/visitors/to-sql.coffee, in that it uses the wrong kind of quote. Even worse, it doesn't do sufficient escaping of quotes in the value, which is a security nightmare.

[carlwoodward]

Not maintaining any more.

[granthusbands]

@yang This issue needs reopening and fixing. It's a serious flaw, both for security and compatibility.