Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Improvements #190

Merged
merged 2 commits into from
Jan 8, 2016
Merged

Security Improvements #190

merged 2 commits into from
Jan 8, 2016

Conversation

SecMyth
Copy link
Contributor

@SecMyth SecMyth commented Jan 8, 2016

There might be the possibility to perform SQL-Injection attacks on SelectLimit via nrows and offset.
Additionally the session manager misses to cover the cookie flag httponly.

@dregad dregad merged commit 3d8e680 into ADOdb:master Jan 8, 2016
dregad added a commit that referenced this pull request Jan 8, 2016
@dregad
Copy link
Member

dregad commented Jan 8, 2016

Many thanks for your contribution !

@dregad dregad added this to the v5.21 milestone Jan 8, 2016
@dregad dregad added the security label Jan 8, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants