[EMAIL PROTECTED] (Paul Hampson) wrote:
> Wouldn't this make strings that start with " and also contain ' break?

  Yes, but those are less likely than commas.

  It's hard to add new features without changing the way the server
works.  If you wanted to be a little more careful, you'd also check
that the LAST character in the string was the same as the first
character.  That would eliminate almost all of the false positives.

> As far as SQL goes, I can't see that we need to do an xlat on single
> or double-quoted strings, only backquoted strings.

  My preference is to move to doing dynamic expansion on *all*
double-quoted strings.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to