On 04/21/2011 05:09 AM, Kris Wallsmith wrote:
My guess is that you are adding “echo” to a function call that calls
echo itself and returns a boolean, such as $view[‘slots’]->output().
Do you see “echo $view[‘slots’]->output()” in your code?
k
You're right Kris, yay!
Thanks for the help :-)
Btw, I still think that putting all parameters in that $parameters
variable can be a security bug later. Can we somehow keep the database
and other sensitive details in another variables that is not accessible
from the view code?
All the best.
-arief
--
If you want to report a vulnerability issue on symfony, please send it to
security at symfony-project.com
You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en