Anonymous | Login | Signup for a new account | 2023-03-27 14:03 CDT | ![]() |
Main | My View | View Issues | Change Log | Roadmap | Docs | Wiki | Repositories |
Viewing Issue Simple Details [ Jump to Notes ] [ Wiki ] [ Related Changesets ] | [ View Advanced ] [ Issue History ] [ Print ] | ||||||
ID | Category | Type | Reproducibility | Date Submitted | Last Update | ||
0001180 | [In-Portal CMS] Database | feature request | N/A | 2011-12-20 04:04 | 2012-07-25 05:32 | ||
Reporter | alex | View Status | public | Project Name | In-Portal CMS | ||
Assigned To | alex | Developer | |||||
Priority | normal | Resolution | fixed | Fixed in Version | 5.2.0-B1 | ||
Status | closed | Product Version | 5.1.3 | Target Version | 5.2.0 | ||
Time Estimate | No estimate | ||||||
Summary | 0001180: Improvement of "qstr" function | ||||||
Description |
In-Portal uses "kDBConnection::qstr" function to escape user request variables before placing their values into database. This prevents sql injections. However there are cases, when there is a need to escape whole array of values. I've created kDBConnection:qstrArray function that easily allows to do that. |
||||||
Additional Information | |||||||
Tags | No tags attached. | ||||||
Reference | https://groups.google.com/d/topic/in-portal-dev/e7YXu-kvqj0/discussion | ||||||
Change Log Message | Adds qstrArray function to escape whole array | ||||||
Estimate Points | 1 | ||||||
Attached Files |
![]() ![]() |
||||||
|
![]() |
|
![]() |
|
![]() alex (manager) 2011-12-20 04:43 |
Will test all together later. |
![]() alex (manager) 2011-12-20 04:44 |
Fix committed to 5.2.x branch. Commit Message: Fixes 0001180: Improvement of "qstr" function |
![]() alex (manager) 2012-07-25 05:32 |
Since 5.2.0 version was released. |
![]() |
|||
In-Portal CMS: 5.2.x r14888 Timestamp: 2011-12-20 04:44:35 Author: alex [ Details ] [ Diff ] |
Fixes 0001180: Improvement of "qstr" function | ||
mod - /in-portal/branches/5.2.x/core/install/upgrades.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/kernel/db/db_connection.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/kernel/db/db_load_balancer.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/kernel/managers/cache_manager.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/units/custom_fields/custom_fields_event_handler.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/units/helpers/language_import_helper.php | [ Diff ] [ File ] | ||
mod - /in-portal/branches/5.2.x/core/units/helpers/search_helper.php | [ Diff ] [ File ] | ||
Modules :: In-Commerce: 5.2.x r14887 Timestamp: 2011-12-20 04:44:17 Author: alex [ Details ] [ Diff ] |
Bug 0001180: Improvement of "qstr" function | ||
mod - /w/in-commerce/branches/5.2.x/units/taxes/taxes_tag_processor.php | [ Diff ] [ File ] | ||
mod - /w/in-commerce/branches/5.2.x/units/zones/zones_tag_processor.php | [ Diff ] [ File ] | ||
![]() |
|||
Date Modified | Username | Field | Change |
2012-07-25 05:32 | alex | Note Added: 0005022 | |
2012-07-25 05:32 | alex | Status | resolved => closed |
2011-12-20 04:44 | alex | Note Added: 0004283 | |
2011-12-20 04:44 | alex | Status | reviewed and tested => resolved |
2011-12-20 04:44 | alex | Fixed in Version | => 5.2.0-B1 |
2011-12-20 04:44 | alex | Resolution | open => fixed |
2011-12-20 04:44 | alex | Assigned To | !COMMUNITY => alex |
2011-12-20 04:44 | alex | Changeset attached | 5.2.x r14888 |
2011-12-20 04:44 | alex | Changeset attached | 5.2.x r14887 |
2011-12-20 04:43 | alex | Note Added: 0004282 | |
2011-12-20 04:43 | alex | Status | needs testing => reviewed and tested |
2011-12-20 04:43 | alex | Assigned To | => !COMMUNITY |
2011-12-20 04:43 | alex | Developer | => alex |
2011-12-20 04:43 | alex | Status | active => needs testing |
2011-12-20 04:43 | alex | Reference | => https://groups.google.com/d/topic/in-portal-dev/e7YXu-kvqj0/discussion |
2011-12-20 04:04 | alex | File Added: qstr_improvement_modules.patch | |
2011-12-20 04:04 | alex | New Issue | |
2011-12-20 04:04 | alex | File Added: qstr_improvement_core.patch | |
2011-12-20 04:04 | alex | Change Log Message | => Adds qstrArray function to escape whole array |
2011-12-20 04:04 | alex | Estimate Points | => 1 |
Main | My View | View Issues | Change Log | Roadmap | Docs | Wiki | Repositories |
Web Development by Intechnic![]() In-Portal Open Source CMS |