Doctrine queryBuilder: SQL Injection risk in addOrderBy() method? – Pretag

Short answer is that column names submitted by form could in fact be used for a sql injection attack. Doctrine assumes you have properly validated …