[Koha-bugs] [Bug 10590] in opac-topissues limit param is not protected

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10590

Galen Charlton <gmcharlt at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gmcharlt at gmail.com

--- Comment #7 from Galen Charlton <gmcharlt at gmail.com> ---
(In reply to Robin Sheat from comment #2)
> Running this gives me:
> DBD::mysql::st execute failed: You have an error in your SQL syntax; check
> the manual that corresponds to your MySQL server version for the right
> syntax to use near 'truncate test' at line 14 at
> /mnt/catalyst/koha/opac/opac-topissues.pl line 117.
> 
> and I don't fully know why.

Looks like one might have to enable multiple statement execution support [1] to
get the canonical exploit to work.

[1] http://dev.mysql.com/doc/refman/5.0/en/c-api-multiple-queries.html

-- 
You are receiving this mail because:
You are watching all bug changes.