Menu

#8 Apostrophe in $cfg_parish_name breaks e-arks

CVS
open
SQL (1)
5
2004-04-20
2004-04-20
No

$cfg_parish_name is used in queries after being
escaped. However, if magic quotes is ON, adodb
assumes the the string is already escaped, however, it
is not since the string is not retrieved via POST or GET,
it is hard-coded in the config file.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB