New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

String injection in the LTree converter #122

Closed

chanmix51 opened this issue Jan 8, 2014 · 1 comment

Labels

Owner

chanmix51 commented Jan 8, 2014

Strings are not escaped in the LTree converter, that can lead to SQL injection.

Owner Author

chanmix51 commented Jan 8, 2014

Patch proposed by Q.Schuler applied in branch 1.2 1fc3fef and 1.1 67f2cdd

chanmix51 closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment