Re: [htdig-dev] HEADS UP: php wrapper script - potential exploit patched

[Dan L. <da...@la...>]

On 12 Oct 2001 at 14:53, Gilles Detillieux wrote:

> According to Dan Langille:
> > I have just committed a fix to the php-wrapper.  This may or may not
> > have been a potential exploit.  The fix prevents people from including
> > arbitrary HTML or PHP code in their search string.  The fix
> > strips such tags from the input string.
> 
> OK, but I thought I should point out that you're still committing to
> the main branch of the htdig source tree, which hasn't seen any activity
> since Feb 2000.  If you want your wrapper to be included in the 3.2.0b4
> development, you have to check out the "htdig-3-2-x" branch of the tree
> and commit your changes to that.

I've just tagged the files with htdig-3-2-0-b4
-- 
Dan Langille
The FreeBSD Diary - http://freebsddiary.org/ - practical examples