diff -u b/modules/simpletest/tests/database_test.test b/modules/simpletest/tests/database_test.test
--- b/modules/simpletest/tests/database_test.test
+++ b/modules/simpletest/tests/database_test.test
@@ -3463,12 +3463,12 @@
    * Tests SQL injection via condition operator.
    */
   public function testConditionOperatorArgumentsSQLInjection() {
-    $injection = "IS NOT NULL) ;INSERT INTO {test} (name) VALUES ('test12345678'); -- ";
-
     // Convert errors to exceptions for testing purposes below.
     set_error_handler(function ($severity, $message, $filename, $lineno) {
       throw new ErrorException($message, 0, $severity, $filename, $lineno);
     });
+
+    $injection = "IS NOT NULL); INSERT INTO {test} (name) VALUES ('test12345678'); -- ";
     try {
       $result = db_select('test', 't')
         ->fields('t')
@@ -3495,8 +3495,8 @@
     db_insert('test')
       ->fields(array('name' => '123456'))
       ->execute();
-    $injection = "= 1 UNION ALL SELECT password FROM user WHERE uid =";
 
+    $injection = "= 1 UNION ALL SELECT password FROM user WHERE uid =";
     try {
       $result = db_select('test', 't')
         ->fields('t', array('name', 'name'))
@@ -3512,8 +3512,8 @@
     db_insert('TEST_UPPERCASE')
       ->fields(array('name' => 'secrets'))
       ->execute();
-    $injection = "IS NOT NULL) UNION ALL SELECT name FROM {TEST_UPPERCASE} -- ";
 
+    $injection = "IS NOT NULL) UNION ALL SELECT name FROM {TEST_UPPERCASE} -- ";
     try {
       $result = db_select('test', 't')
         ->fields('t', array('name'))