|
From: | Philipp Kamps |
Subject: | [Phpgroupware-tracker] [bugs #12172] adodb - installation using psql fails |
Date: | Thu, 3 Mar 2005 17:18:04 +0000 |
User-agent: | Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050105 Debian/1.7.5-1 |
Update of bugs #12172 (project phpgroupware): Status: None => Fixed _______________________________________________________ Follow-up Comment #2: I changed following code include('class.sql_'.$dbms.'inc.php'); to a switch statement. <smartass> including files with a variable is a potential security hole. A switch statement allows you to hardcode the file, you want to include. It additionally allows you to react if you choose an unsupported dbms. </smartass> _______________________________________________________ This item URL is: <http://savannah.gnu.org/bugs/?func=detailitem&item_id=12172> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |