<div dir="ltr">Hi,<div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jul 15, 2013 at 7:20 AM, Robin Sheat <span dir="ltr"><<a href="mailto:robin@catalyst.net.nz" target="_blank">robin@catalyst.net.nz</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">This said, there are two patches there now: Fridolyn's one that filters<br>

on input, and my followup that parameterises the SQL to add another<br>
layer of defence (also doing queries the way they're supposed to be<br>
done.)<br></blockquote></div><br>These two patches have now been tested and pushed to master [1, 2]</div><div class="gmail_extra"><br></div><div class="gmail_extra">[1] <a href="http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=57866d6b67c3f8b29290150f21c71395315a73fe">http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=57866d6b67c3f8b29290150f21c71395315a73fe</a></div>
<div class="gmail_extra">[2] <a href="http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=89cf013a6fadcb1347151798f3fdab0d8c75cd15">http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=89cf013a6fadcb1347151798f3fdab0d8c75cd15</a></div>
<div class="gmail_extra"><br>Regards,</div><div class="gmail_extra"><br>Galen<br>-- <br><div dir="ltr"><div>Galen Charlton</div><div>Manager of Implementation</div><div>Equinox Software, Inc. / The Open Source Experts</div>
<div>email:  <a href="mailto:gmc@esilibrary.com" target="_blank">gmc@esilibrary.com</a></div><div>direct: +1 770-709-5581</div><div>cell:   +1 404-984-4366</div><div>skype:  gmcharlt</div><div>web:    <a href="http://www.esilibrary.com/" target="_blank">http://www.esilibrary.com/</a></div>
<div>Supporting Koha and Evergreen: <a href="http://koha-community.org" target="_blank">http://koha-community.org</a> & <a href="http://evergreen-ils.org" target="_blank">http://evergreen-ils.org</a></div></div>
</div></div>