Hi,

I found that sql_escape_func in rlm_sql.c does not encode the '='
character. That makes it impossible later to decode the string correctly
again. If you are looking at e.g. an encoded username "=3B", you don't
know whether the unencoded original was ";" or "=3B". Would it be
possible to change that in the next release?

While I am already at it, I am under the impression that this function
only deals with US-ASCII characters correctly. Can anybody confirm that?

Fabian

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to