diff options
| author | Dave Paul <dave.paul@jadu.net> | 2018-03-06 15:40:29 +0000 |
|---|---|---|
| committer | Damien Regad <dregad@mantisbt.org> | 2018-03-30 02:24:54 +0200 |
| commit | d29c23f2264ec95c6d3851e0f51ce240b2f36b74 (patch) | |
| tree | 38c7f723c0fcf78214ab1f65cc940858d4355e6d /docs/changelog.md | |
| parent | 34788ce8c1d08500631f55764cc2247b9c7cfd2b (diff) | |
| download | adodb-d29c23f2264ec95c6d3851e0f51ce240b2f36b74.tar.gz adodb-d29c23f2264ec95c6d3851e0f51ce240b2f36b74.tar.bz2 adodb-d29c23f2264ec95c6d3851e0f51ce240b2f36b74.zip | |
Fix potential SQL injection in SelectLimit()
The `SelectLimit` function has a potential SQL injection vulnerability
through the use of the `nrows` and `offset` parameters which are not
forced to integers.
This is a follow-up on #311, and fixes all remaining drivers that do not
use ADOConnection::SelectLimit().
Fixes #401
Signed-off-by: Damien Regad <dregad@mantisbt.org>
Original commits squashed, message reworded. Fixed whitespace.
Diffstat (limited to 'docs/changelog.md')
0 files changed, 0 insertions, 0 deletions