Re: Problems with preventing LDAP injection

[Emmanuel Lecharny]

satish gutta wrote:
To prevent attacks we scan our LDAP queries for special characters and
replace them with respective unicode values,
we use the following code

  
Is the filter you are processing the internal part if the filter ? (ie, 
if the LDAP filter is something like (at=<internal part>), with 
<internal part> being "(g*")

Is it on ADS 1.5.4 ?

--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org