[AOLSERVER] [ aolserver-Bugs-474556 ] ns_dbquotevalue doesn't escape backslash

2002-02-26 Thread Ms. Source Forge
Bugs item #474556, was opened at 2001-10-24 10:25 You can respond by visiting: http://sourceforge.net/tracker/?func=detailatid=103152aid=474556group_id=3152 Category: API: Tcl Group: None Status: Open Resolution: None Priority: 5 Submitted By: Brady Wetherington (camusatan) Assigned to: Kriston

[AOLSERVER] Bugs in ns_dbquotevalue

2002-01-28 Thread Wojciech Kocjan
Hello. Here is what caused problems for me with both mySQL and PostgreSQL: ns_dblist $h "SELECT lower([ns_dbquotevalue {ABC'DEF\'}])" Basically it quoted the string into 'ABC''DEF\'', which is not correct. Also, it does not work correctly for UTF-escapable characters. proc ns_dbquotevalue

Re: [AOLSERVER] Bugs in ns_dbquotevalue

2002-01-28 Thread David Walker
I've also noticed this problem. It can be exploited to execute functions in your database in certain circumstances where you're quoting submitted data. I think this function may need different behavior for Oracle or Postgres. On Monday 28 January 2002 11:46 am, you wrote: Hello. Here is