Re: [symfony-users] Re: Possible SQL injection

2010-02-26 Thread Peter Peltonen
On Thu, Feb 25, 2010 at 12:50 PM, DEEPAK BHATIA toreachdee...@gmail.com wrote: Hi Fabien, I am using Symfony 1.1 in which we are to create a session timeout of 4 hours but it is not working by changing in factories.yml. Regards Deepak Bhatia On Thu, Feb 25, 2010 at 3:58 PM, Fabien

Re: [symfony-users] Re: Possible SQL injection

2010-02-26 Thread Daniel Lohse
Just update to the latest symfony version, which is 1.2.12 in your case, and clear your cache. That's all. :) Daniel On 26.02.2010, at 15:37, Peter Peltonen wrote: On Thu, Feb 25, 2010 at 12:50 PM, DEEPAK BHATIA toreachdee...@gmail.com wrote: Hi Fabien, I am using Symfony 1.1 in which

Re: [symfony-users] Re: Possible SQL injection

2010-02-25 Thread Tugdual SAUNIER
Works for me too. Regards, Tugdual -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups symfony users group. To post to this group, send email to

Re: [symfony-users] Re: Possible SQL injection

2010-02-25 Thread Fabien Potencier
This has been fixed three hours ago, and available in the latest symfony release. More information here: http://www.symfony-project.org/blog/2010/02/25/security-release-1-3-3-and-1-4-3 Fabien -- Fabien Potencier Sensio CEO - symfony lead developer sensiolabs.com | symfony-project.org |

Re: [symfony-users] Re: Possible SQL injection

2010-02-25 Thread DEEPAK BHATIA
Hi Fabien, I am using Symfony 1.1 in which we are to create a session timeout of 4 hours but it is not working by changing in factories.yml. Regards Deepak Bhatia On Thu, Feb 25, 2010 at 3:58 PM, Fabien Potencier fabien.potenc...@symfony-project.com wrote: This has been fixed three hours

Re: [symfony-users] Re: Possible SQL injection

2010-02-25 Thread Gareth McCumskey
Why not create a new thread instead of hijacking this one? On Thu, Feb 25, 2010 at 12:50 PM, DEEPAK BHATIA toreachdee...@gmail.com wrote: Hi Fabien, I am using Symfony 1.1 in which we are to create a session timeout of 4 hours but it is not working by changing in factories.yml. Regards

Re: [symfony-users] Re: Possible SQL injection

2010-02-25 Thread DEEPAK BHATIA
Already done so :-) On Thu, Feb 25, 2010 at 7:40 PM, Gareth McCumskey gmccums...@gmail.comwrote: Why not create a new thread instead of hijacking this one? On Thu, Feb 25, 2010 at 12:50 PM, DEEPAK BHATIA toreachdee...@gmail.com wrote: Hi Fabien, I am using Symfony 1.1 in which we are

[symfony-users] Re: Possible SQL injection

2010-02-24 Thread Kris Wallsmith
I've committed a fix to Subversion and will be releasing soon. Please test the fix in the meantime and report any issues here or on Trac. http://trac.symfony-project.org/changeset/28260 Thanks, Kris On Feb 24, 1:35 pm, Michał Piotrowski mkkp...@gmail.com wrote: W dniu 24 lutego 2010 22:32

Re: [symfony-users] Re: Possible SQL injection

2010-02-24 Thread Michał Piotrowski
2010/2/25 Kris Wallsmith kris.wallsm...@symfony-project.com: I've committed a fix to Subversion and will be releasing soon. Please test the fix in the meantime and report any issues here or on Trac. Works for me. Thanks for fast response. http://trac.symfony-project.org/changeset/28260