Hi Robert,

That's a good one.

I did notice that in many parts of the code the global config variable was 
selectively filtered using "person_%". In MySQL, the "_" should be escaped 
as otherwise it means any characters wildcard. The existing filter will 
choose "personell" and "person_" as well! I do not know if the "person\_%" 
will work as an argument in the function but it certainly works in MySQL 
directly. At the moment it is not affecting any working by having a few more 
unfiltered variables getting in.

Regards,
Ap.Muthu

> Hi,
>
> just one note on 6779, there was one value missing in
> care_config_global. Can be added by:
>
> INSERT INTO care_config_global VALUES ('person_insurance_1_nr_hide',
> '1', NULL, '', '', '', 00000000000000, '', '0000-00-00 00:00:00');
>
> Robert



------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Care2002-developers mailing list
Care2002-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/care2002-developers

Reply via email to