On Thu, Aug 24, 2006 at 10:48:39PM +0200, Tobias Toedter wrote:
> On Tuesday 15 August 2006 13:02, Sergey Poznyakoff wrote:
> > Tobias Toedter <[EMAIL PROTECTED]> wrote:
> > > thanks a lot for your contribution. I'll probably apply most of your
> > > patches for the localisation issues.
> >
> > OK.
> 
> Hi,
> 
> I've now processed your patch and included all fixes for a better 
> localization (I think).

Cool :)


> I did not apply the mysql_* issues, as those 
> certainly need some careful review before applying. However, as they are 
> possible security problems, I'd like to see them in the next release.

Apparently we need to perform additional checks according to
get_magic_quotes_gpc() before to use mysql_real_escape_string(). I'll
try to do that soon.


Also, Sergey, I see that you modified the old Savannah mailman
code. As this code is unused since 2003, and since Savannah now uses
sv_mailman, I think it would be good to remove this hardcoded
code. Would you mind switching to sv_mailman or using a local patch
for your installation?

-- 
Sylvain

_______________________________________________
Savane-dev mailing list
[email protected]
https://mail.gna.org/listinfo/savane-dev

Reply via email to