On Thu, Jan 13, 2011 at 04:15:44PM +0100, Peter Bex wrote:
> I think it's important to focus first on getting other relational,
> SQL-based database systems supported.  Perhaps SQLite or Firebird,
> and if people have access to them, MS SQL/Oracle.

One other thing that we need to figure out is what to do with
MySQL's default case insensitive treatment of text fields.
I personally think it's better to assume (and enforce if possible) that
text comparison are case sensitive, and when we don't want that to
explicitly put it in the query (eg using ILIKE).

Currently, for example, the "search" functionality doesn't return
anything unless you exactly match the case of the thing you're looking
for, which is not very userfriendly.  In MySQL this works better because
it's always case-insensitive.  However, there are probably places where
this is also happening but _not_ wanted; usernames come to mind.
I haven't checked, but I wouldn't be surprised if there are some bugs or
possibly even vulnerabilities related to usernames being matched
case-insensitively.

Cheers,
Peter Bex
Solide ICT - http://www.solide-ict.nl

_______________________________________________
Dev mailing list
Dev@lists.chamilo.org
http://lists.chamilo.org/listinfo/dev

Reply via email to