Re: Bug 62479

On Sun, Jan 19, 2014, at 02:15 AM, Lester Caine wrote: > Will Fitch wrote: > > Then again, I didn't expect to have > > a bug where single quotes are part of the password, so there's always a > > surprise. > > Leaving holes that can possibly be used by hackers is the problem here. > IF > someone finds an edge case that does not get handled their next step is > to see > if it can be exploited? Code review is not a matter of 'surprise' but > rather > 'what have I missed that could be a problem'? I agree. However, this is more of a situation of not accounting for all situations as opposed to introducing a security flaw. As I told Stas, I'm going to update to account for beginning/ending quotes. > > -- > Lester Caine - G8HFL > ----------------------------- > Contact - http://lsces.co.uk/wiki/?page=contact > L.S.Caine Electronic Services - http://lsces.co.uk > EnquirySolve - http://enquirysolve.com/ > Model Engineers Digital Workshop - http://medw.co.uk > Rainbow Digital Media - http://rainbowdigitalmedia.co.uk > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php >