Hallo,

program/include/main.inc, line 608:
        ($sql_result = $DB->query(preg_replace('/%u/', $user, 
$CONFIG['virtuser_query']))) &&

Shouldn't the username be quoted correctly before inserted into the
database query?

Nicolas


Reply via email to