In-Portal Issue Tracker

Welcome to the In-Portal Open Source CMS Issue Tracker! This is a central management / tracking tool for all types of tasks / issues / bugs for the In-Portal Project. Before reporting any issues, please make sure to read the Guide into Issue Tracker and How to Properly Test and Report Bugs!

Viewing Issue Advanced Details Jump to Notes ] Wiki ]  Related Changesets ] View Simple ] Issue History ] Print ]
ID Category Type Reproducibility Date Submitted Last Update
0001180 [In-Portal CMS] Database feature request N/A 2011-12-20 04:04 2012-07-25 05:32
Reporter alex View Status public Project Name In-Portal CMS
Assigned To alex Developer
Priority normal Resolution fixed Platform
Status closed   OS
  OS Version
ETA none Fixed in Version 5.2.0-B1 Product Version 5.1.3
  Target Version 5.2.0 Product Build
Time EstimateNo estimate
Summary 0001180: Improvement of "qstr" function
Description In-Portal uses "kDBConnection::qstr" function to escape user request variables before placing their values into database. This prevents sql injections.

However there are cases, when there is a need to escape whole array of values.

I've created kDBConnection:qstrArray function that easily allows to do that.
Steps To Reproduce
Additional Information
Tags No tags attached.
Reference https://groups.google.com/d/topic/in-portal-dev/e7YXu-kvqj0/discussion
Change Log Message Adds qstrArray function to escape whole array
Estimate Points 1
Attached Files patch file icon qstr_improvement_core.patch [^] (6,153 bytes) 2011-12-20 04:04 [Show Content]
patch file icon qstr_improvement_modules.patch [^] (1,173 bytes) 2011-12-20 04:04 [Show Content]

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
User avatar (0004282)
alex (manager)
2011-12-20 04:43

Will test all together later.
User avatar (0004283)
alex (manager)
2011-12-20 04:44

Fix committed to 5.2.x branch. Commit Message:

Fixes 0001180: Improvement of "qstr" function
User avatar (0005022)
alex (manager)
2012-07-25 05:32

Since 5.2.0 version was released.

- Related Changesets
In-Portal CMS: 5.2.x r14888
Timestamp: 2011-12-20 04:44:35
Author: alex
Details ] Diff ]
Fixes 0001180: Improvement of "qstr" function
mod - /in-portal/branches/5.2.x/core/install/upgrades.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/kernel/db/db_connection.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/kernel/db/db_load_balancer.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/kernel/managers/cache_manager.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/units/custom_fields/custom_fields_event_handler.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/units/helpers/language_import_helper.php Diff ] File ]
mod - /in-portal/branches/5.2.x/core/units/helpers/search_helper.php Diff ] File ]
Modules :: In-Commerce: 5.2.x r14887
Timestamp: 2011-12-20 04:44:17
Author: alex
Details ] Diff ]
Bug 0001180: Improvement of "qstr" function
mod - /w/in-commerce/branches/5.2.x/units/taxes/taxes_tag_processor.php Diff ] File ]
mod - /w/in-commerce/branches/5.2.x/units/zones/zones_tag_processor.php Diff ] File ]

- Issue History
Date Modified Username Field Change
2012-07-25 05:32 alex Note Added: 0005022
2012-07-25 05:32 alex Status resolved => closed
2011-12-20 04:44 alex Note Added: 0004283
2011-12-20 04:44 alex Status reviewed and tested => resolved
2011-12-20 04:44 alex Fixed in Version => 5.2.0-B1
2011-12-20 04:44 alex Resolution open => fixed
2011-12-20 04:44 alex Assigned To !COMMUNITY => alex
2011-12-20 04:44 alex Changeset attached 5.2.x r14888
2011-12-20 04:44 alex Changeset attached 5.2.x r14887
2011-12-20 04:43 alex Note Added: 0004282
2011-12-20 04:43 alex Status needs testing => reviewed and tested
2011-12-20 04:43 alex Assigned To => !COMMUNITY
2011-12-20 04:43 alex Developer => alex
2011-12-20 04:43 alex Status active => needs testing
2011-12-20 04:43 alex Reference => https://groups.google.com/d/topic/in-portal-dev/e7YXu-kvqj0/discussion
2011-12-20 04:04 alex File Added: qstr_improvement_modules.patch
2011-12-20 04:04 alex New Issue
2011-12-20 04:04 alex File Added: qstr_improvement_core.patch
2011-12-20 04:04 alex Change Log Message => Adds qstrArray function to escape whole array
2011-12-20 04:04 alex Estimate Points => 1



Web Development by Intechnic
In-Portal Open Source CMS
In-Portal Open Source CMS
Copyright © 2000 - 2009 MantisBT Group

Powered by Mantis Bugtracker