Hi, I found that sql_escape_func in rlm_sql.c does not encode the '=' character. That makes it impossible later to decode the string correctly again. If you are looking at e.g. an encoded username "=3B", you don't know whether the unencoded original was ";" or "=3B". Would it be possible to change that in the next release?
While I am already at it, I am under the impression that this function only deals with US-ASCII characters correctly. Can anybody confirm that? Fabian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html