Hi, On Mon, Jul 15, 2013 at 7:20 AM, Robin Sheat <robin@catalyst.net.nz> wrote:
This said, there are two patches there now: Fridolyn's one that filters on input, and my followup that parameterises the SQL to add another layer of defence (also doing queries the way they're supposed to be done.)
These two patches have now been tested and pushed to master [1, 2] [1] http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=57866d6b67c3f8b2... [2] http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=89cf013a6fadcb13... Regards, Galen -- Galen Charlton Manager of Implementation Equinox Software, Inc. / The Open Source Experts email: gmc@esilibrary.com direct: +1 770-709-5581 cell: +1 404-984-4366 skype: gmcharlt web: http://www.esilibrary.com/ Supporting Koha and Evergreen: http://koha-community.org & http://evergreen-ils.org