[geeklog-devel] code scrubbing: stripslashes

[Oliver Spiesshofer]

With the changes done during some of the upgrades I seriously doubt the 
site will work if the upgrade of that file is not done.
Just take COM_createLink. w/o that one, almost every page that creates 
any kind of link crashes.

Oliver

Michael Jervis wrote:

> I think the /concept/ is right, doing an auto-and-correct stripslashes

> on all HTTP globals on start of the page. Obviously as noted the

> implementation is incorrect.

>

> Should be reasonably easy to clean up everything.

>

> Only problem is if someone badly upgrades their lib-common.php when

> upgrading, they may have a gaping hole in their security...

> _______________________________________________

> geeklog-devel mailing list

> geeklog-devel at lists.geeklog.net

> http://eight.pairlist.net/mailman/listinfo/geeklog-devel

>

>

>