Re: TWIG SQL query bugs

From: kj (kjat_private)
Date: Thu May 31 2001 - 09:48:37 PDT

Next message: Adnan Rahman: "Acme.Server v1.7 of 13nov96 Directory Browsing"

Previous message: Oracle Security Alerts: "Re: Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator"
In reply to: Ben Efros: "Re: TWIG SQL query bugs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> PHP used to have an option to automatically use addslashes() on any variable
> passed to it via POST or GET.  Please see your PHP.INI file and set the
> appropriate setting for "magic_quotes_gpc"


Isn't the "magic_quotes_gpc" only for GET/POST/COOKIES. For SQL
statements to dbs I think you need to initialize magic_quotes_runtime
for the addslashes() default.

K.J.

Next message: Adnan Rahman: "Acme.Server v1.7 of 13nov96 Directory Browsing"
Previous message: Oracle Security Alerts: "Re: Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator"
In reply to: Ben Efros: "Re: TWIG SQL query bugs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Jun 01 2001 - 11:32:28 PDT