http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7013

Chris Cormack <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #6 from Chris Cormack <[email protected]> 2011-12-05 
15:47:27 UTC ---
I agree with comment 3, this code is still vulnerable to sql injection. 

I will add a follow up, but I would encourage all developers to fix any bad
coding practices like this that they say, as they change code. It is the
perfect opportunity and really, there is no good reason to ever not use sql
placeholders.

-- 
Configure bugmail: 
http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to