[Flow] Use Query to delet data from repository

[Bastian Waidelich]

Winfried Mingst wrote:

Hey Winfried,

> $this->entityManager->createQuery('DELETE  \My\Package\Domai\Model\Test
> t WHERE t.color='.$someValue)->execute();

INJECTION ALERT!

You should avoid string concatenation for SQL/DQL queries if you don't 
want to undermine Doctrine's security layer. See [1]



[1] 
http://docs.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/security.html


-- 
Bastian Waidelich
--
Core Developer Team

TYPO3 .... inspiring people to share!
Get involved: typo3.org