http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5771 Galen Charlton <gmcharlt@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Failed QA CC| |gmcharlt@gmail.com --- Comment #23 from Galen Charlton <gmcharlt@gmail.com> --- Failed QA for a major security flaw: /cgi-bin/koha/tools/import_borrowers.pl?report=1&errors_filename=/etc/passwd Either more infrastructure is needed to maintain a secure area for storing and retrieving such files or (and this is possibly easier) errors from patron import runs should be stored in the database for later retrieval. I also note that the patch as written introduces a bunch of untranslatable strings. -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.