December 2003 - Koha-devel - lists.koha-community.org

for Chris
by paul POULAIN 03 Dec '03

03 Dec '03

Hi chris, In the DB schema (see previous post), i've listed 10 tables that are not used, or almost not used in Koha. Could you check the list & confirm deletion (look at branchcategories & branchrelations specifically) Note : i'll drop tables only in 2.0.x branch, not in 2.0.0 one (to avoid last-minut bugs) -- Paul POULAIN Consultant indépendant en logiciels libres responsable francophone de koha (SIGB libre http://www.koha-fr.org)

1 0

DB schema
by paul POULAIN 03 Dec '03

03 Dec '03

Hi guys, An uptodate DB schema is avaible :-) Many people asked for this schema. I've done it. Look at Koha wiki (www.koha.org/wiki) Developper link chapter. The 2 pages schema is avaible in 3 formats : jpg (2 images), PDF and OpenOffice.org (original format) HTH -- Paul POULAIN Consultant indépendant en logiciels libres responsable francophone de koha (SIGB libre http://www.koha-fr.org)

1 0

Many DBI updates going through as part of bug 662 fix
by MJ Ray 03 Dec '03

03 Dec '03

I'm reviewing nearly all DBI calls in koha after finding non-placeholder use of user values. They could leave koha open to SQL insertion attacks, possible from users. I really don't want that to happen. I'm about 10% done. The main changes I'm making are: 1. Rephrasing anything like $sth = $dbh->prepare("select * from borrowers where borrowernum=$bornum"); $sth->execute(); into $sth = $dbh->prepare("select * from borrowers where borrowernum=?"); $sth->execute($bornum); 2. Rephrasing $query = "some string"; $sth = $dbh->prepare($query); into $sth = $dbh->prepare("some string"); 3. Removing suggestions about using $dbh->do("select * from foo where id=$bar") from comments. I'm trying to be really careful about this, but the sheer number of calls may mean that I introduce a new bug. The various search pages are the most likely to show symptoms, so I'll try to test those before the next release. If any maintainers want to warn me off their code and make these changes themselves, please email me. I'm still wandering around C4/Circulation and working in roughly alphabetical order. -- MJR/slef My Opinion Only and possibly not of any group I know. Please http://remember.to/edit_messages on lists to be sure I read http://mjr.towers.org.uk/ gopher://g.towers.org.uk/ slef(a)jabber.at Creative copyleft computing services via http://www.ttllp.co.uk/

1 0

polish version in 2.0.0RC1
by paul POULAIN 03 Dec '03

03 Dec '03

Hi benedikt & al, do you think the polish version is stable enough to be included as an option during the installation of Koha ? A new version 2.0.0RC1 will be released before end of week. -- Paul POULAIN Consultant indépendant en logiciels libres responsable francophone de koha (SIGB libre http://www.koha-fr.org)

1 0