From 218c17735a9a5c5ff3ef8b9697728e5b89e0fe55 Mon Sep 17 00:00:00 2001
From: Simon <simon.sessingoe@gmail.com>
Date: Wed, 19 Jul 2023 21:01:45 +0200
Subject: [PATCH] Fixed params with ? not escaped correctly

---
 src/Pecee/Pixie/QueryBuilder/QueryObject.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/Pecee/Pixie/QueryBuilder/QueryObject.php b/src/Pecee/Pixie/QueryBuilder/QueryObject.php
index 439061b..cec2d08 100644
--- a/src/Pecee/Pixie/QueryBuilder/QueryObject.php
+++ b/src/Pecee/Pixie/QueryBuilder/QueryObject.php
@@ -83,9 +83,11 @@ protected function interpolateQuery($query, $params): string
         $keys = [];
         $values = $params;
 
+        $query = str_replace('?', ':?', $query);
+
         // build a regular expression for each parameter
         foreach ($params as $key => $value) {
-            $keys[] = '/' . (\is_string($key) ? ':' . $key : '[?]') . '/';
+            $keys[] = '/' . (\is_string($key) ? ':' . $key : '\:\?') . '/';
 
             if($value instanceof Raw) {
                 continue;