diff --git a/core/lib/Drupal/Core/Database/Connection.php b/core/lib/Drupal/Core/Database/Connection.php index 1daef72..b671b8b 100644 --- a/core/lib/Drupal/Core/Database/Connection.php +++ b/core/lib/Drupal/Core/Database/Connection.php @@ -635,7 +635,7 @@ protected function expandArguments(&$query, &$args) { // To protect against SQL injection, Drupal only supports executing one // statement at a time. Thus, the presence of a SQL delimiter is not // allowed. - if (strpos($query, ';') !== FALSE) { + if (strpos($query, 'CREATE TABLE') !== 0 && strpos($query, ';') !== FALSE) { throw new \PDOException('; is not supported in SQL strings. Use only one statement at a time'); } // If the placeholder indicated the value to use is an array, we need to