| commit | d56d58fcfbe04214f9df419901e766341a1b95d1 | |
| author | bradymiller <bradymiller@users.sourceforge.net> | |
| Sun, 10 Mar 2013 09:35:20 +0000 (10 01:35 -0800) | ||
| committer | bradymiller <bradymiller@users.sourceforge.net> | |
| Mon, 18 Mar 2013 02:29:47 +0000 (17 19:29 -0700) | ||
| tree | 7c5e7670611aae3d4dc3594fc98eb3cd41b79dae | treesnapshot (tar.gz zip) |
| parent | d04153a06f647c020fe455a17d330f3f1cc6b0d3 | commitdiff |
Additional Sql-injection functions and techniques for escaping;
1. Improved/clarified the functions in library/formdata.inc.php
2. Added mechanism for whitelisting openemr sql table names.
3. Added mechanism for whitelisting openemr sql column names.
4. Incorporated it into the messages module
5. Incorporated into dictation form
6. Incorporated into work/school form/note
1. Improved/clarified the functions in library/formdata.inc.php
2. Added mechanism for whitelisting openemr sql table names.
3. Added mechanism for whitelisting openemr sql column names.
4. Incorporated it into the messages module
5. Incorporated into dictation form
6. Incorporated into work/school form/note
14 files changed: