https://bugzilla.wikimedia.org/show_bug.cgi?id=19621


Roan Kattouw <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]




--- Comment #3 from Roan Kattouw <[email protected]>  2009-07-13 18:07:03 
UTC ---
(In reply to comment #2)
> (In reply to comment #1)
> > Add to query (line159) " AND page_is_redirect=0 " to get rid of statistics 
> > on
> > redirects.
> 
> Better adding: " AND page_is_redirect=0" in function DisplayForm line 387:
> 
> <option value='=0 AND page_is_redirect=0' selected>".
> wfMsg('usagestatisticsnsmain') ."
> 

That shouldn't work. If it does, that's an SQL injection vulnerability.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to