Author: bkuhn
Date: Sun Jun 21 19:03:39 2009
New Revision: 5890

URL: http://svn.gna.org/viewcvs/pokersource?rev=5890&view=rev
Log:
Solves the SQL injection bug in listTables().  Use %s and a list of SQL
parameters so that the SQL library does the quoting for us, rather than
doing it ourselves.

Note that ListTablesTestCase.test14_sqlInjectionInParametersShouldNotWork
now passes.  Three other tests still don't pass, as they are for the
min_players parameter that I still have not implemented, but will do so
next.

Modified:
    branches/table-picker/poker-network/pokernetwork/pokerservice.py


_______________________________________________
Pokersource-commits mailing list
[email protected]
https://mail.gna.org/listinfo/pokersource-commits

Reply via email to