PEAK XOOPS - Re: XOOPS Protector 
Re: XOOPS Protector
Re: XOOPS Protector
msg# 1.1
- depth:
- 1
GIJOE
Posts: 4110
Posts: 4110
hi Yuji.
Thank you for sending your language files to me.
Quote:This means that:
'/* comment */' ok
'/* comment ' bad
In SQL Injection, '/*' is usually used as terminating SQL.
eg)
SELECT uname FROM users_table WHERE id='1' uni-on SELECT passwd ... /*'
red part is injectioned from a malicious guest.
The last /* makes the SQL valid.
Thus, finding "isolated comment" means preventing from SQL Injections.
Quote:I'm sorry!
I've just released 2.01 before I read this message.
In next release, I'll repair it.
*/ <- for Xoops Protector
Thank you for sending your language files to me.
Quote:
Just couldn't figure out what does "孤立コメント" means, so I translated it as "isolated comment". (Is it PHP comment?) ^^'
'/* comment */' ok
'/* comment ' bad
In SQL Injection, '/*' is usually used as terminating SQL.
eg)
SELECT uname FROM users_table WHERE id='1' uni-on SELECT passwd ... /*'
red part is injectioned from a malicious guest.
The last /* makes the SQL valid.
Thus, finding "isolated comment" means preventing from SQL Injections.
Quote:
BTW, 'portuguese' is the language folder for Portuguese (Portugal). 'portuguesebr' is for Brazilian Portuguese. So, I would like to insist you to keep these language files as 'portuguesebr' instead.
I've just released 2.01 before I read this message.
In next release, I'll repair it.
*/ <- for Xoops Protector
Votes:2
Average:0.00
Posts tree
-
XOOPS Protector
(FutureSpy, 2004/9/11 7:52)
-
Re: XOOPS Protector
(GIJOE, 2004/9/11 17:37)
-
Re: XOOPS Protector
(FutureSpy, 2004/9/11 23:16)
-
-
Login