Dear List,

I am using rlm_sql_mysql with FreeRADIUS 0.2 on FreeBSD 4.4.
Usernames with special characters like "'" are not being escaped
properly.

With -xx it's evident that sql_escape_string is working alright.
But when it's querying MySQL, an extra "\" gets added.  An
example:

    Username: hukka'hua
    sql_escape_string output: hukka\'hua
    Actual query to mysql: hukka\\'hua

People must be using rlm_sql a lot.  Can anybody please give me a
bang and tell me what I have missed?

-- 
Mojahed
System Administrator
Agni Systems Limited

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to