Re: [openupload-devel] Escaping special password characters

[Weir, J. <jas...@nh...>]

Aside from the password issue this presents sql injection problems, all user entered data needs to be filtered in some way...

Here is a more complete list

 $password = addslashes($password, '\;%_:$&?-+=*[]()¡"\"´`');

-Jason

-----Original Message-----
From: Alessandro Briosi [mailto:ts...@br...] 
Sent: Tuesday, August 18, 2009 5:30 PM
To: OpenUpload Delvel and General talk
Subject: Re: [openupload-devel] Escaping special password characters


I think I should find a more general version, 'cause maybe we miss some...

Thanks,
Alessandro

Weir, Jason ha scritto:
> I added the following line to ldap.inc.php right after line 42 in the 
> authenticate function
> 
> $password = addslashes($password, '!\',+"\\<>;*');
> 
> It fixed my problem - hope it helps someone else.
> 
> -Jason


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.