--TEST-- Mysqli query with SQL comment (--) protection set to fail --INI-- extension=mysqli.so suhosin.sql.bailout_on_error=0 suhosin.sql.comment=2 suhosin.sql.opencomment=0 suhosin.sql.multiselect=0 suhosin.sql.union=0 suhosin.log.stdout=32 --SKIPIF-- --FILE-- query("SELECT 1 -- injection"); flush(); echo "mark."; ?> --EXPECTREGEX-- ALERT - Comment in SQL query.*\)