Re: PHP 4.3.3RC3 Released
| From: | moshe doron | Date: | Thu, 14 Aug 2003 08:26:24 +0000 |
| Subject: | Re: PHP 4.3.3RC3 Released | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-3899@lists.php.net to get a copy of this message | ||
"Ilia Alshanetsky" <ilia@prohost.org> wrote in message
news:<200308071447.03285.ilia@prohost.org>...
> I would like to ask that all developers refrain from making commits to
> the 4_3 tree until 4.3.3 final is released, unless a patch addresses a
> critical issue. Critical issues are defined as the following:
> 1) Security Fixes
What about hacking somehow the sqlite library to disallow chained queries
(or at least do it optionally)?
This behavior is *huge* security hole, allow to the cracker drop ur database
using simple select where query.
moshe