Sorry for crossposting. But I think the users are allowed to know what is
going on, even if this is a developers matter.

I think I found the solution to the problem below, which affects all
smsbox->sqlbox->bearerbox users.

I must admit: Haven't tested it yet. But it should work.

See attached patch. Votes?


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf
Of Tomasz
Sent: vrijdag 11 juni 2010 15:10
To: Kannel list
Subject: Re: Messages with php stripslashes

Hi,

I've got the same issue - when we send MT message by CGI which
contains ' sign, the recipient gets \' (escaped '). When we inject MT
directly to MySQL Database, recipient get only ' sing (valid!).

Our configuration is:

PHP MT PUSH  - SMSBOX - SQLBOX - BEARERBOX - SMSC

The problem is caused probably by SQLBOX - somewhere there must be
some kind of addslashes function. Escaped sign is being delivered to
BEARERBOX. I've tried to find this is source code but I was unable.

Have someone fixed this problem yet?

Thanks
Tomasz

W Twoim liście datowanym 24 maja 2010 (02:05:22) można przeczytać:

> I have posted some weeks ago a similar issue with sqlbox but it is not
> resolved for the moment, Alejandro to check on his side to reproduce the
> issue.

> Check my post in the mailling list archive to see if it the same problem:

> Object: *Quote and backslash issue*

> As you when using CGI interface to send a SMS I got the quote escaped on
the
> mobile, BUT when using directly SQL injection on sqlbox it works
correctly.

> Regards,

> Emmanuel



Attachment: sql-escape.patch
Description: Binary data

Reply via email to