Welcome to Geeklog, Anonymous Sunday, May 28 2023 @ 02:14 am EDT

Comments for Current Security Issues (Sept 2003)

Current Security Issues (Sept 2003) | 29 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

repeat after me there are no sql injection issues, AGAIN there are no ..

Authored by: Anonymous (Anonymous User) on Wednesday, October 08 2003 @ 07:17 am EDT

http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-10/0413.html

repeat after me there are no sql injection issues, AGAIN there are no ..

Authored by: jhk on Wednesday, October 08 2003 @ 09:25 am EDT

Pedantically speaking, the FORUM PLUGIN has a problem with SQL injection like the SHOUTBOX BLOCK had one with XSS. Granted, these are used on a lot of sites but they are not part of the GL1.3.8-1 download. It is a bit unfair to blame the GL developers for coding insecure 3rd party add-ons. :)

repeat after me there are no sql injection issues, AGAIN there are no ..

Authored by: Blaine on Wednesday, October 08 2003 @ 04:32 pm EDT

You only have to enable the GL Filter to have all HTML filtered thru the Core GL Functions. Additionally, You can limit the allowable HTML tags via the config.php.

The GL filter is not enabled on this site currently.

---
Geeklog components by PortalParts -- www.portalparts.com

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks