Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:3899
Return-Path: <mosdoron@netvision.net.il>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 49164 invoked by uid 1007); 14 Aug 2003 07:27:04 -0000
Message-ID: <20030814072704.49157.qmail@pb1.pair.com>
To: internals@lists.php.net
References: <200308071447.03285.ilia@prohost.org>
Date: Thu, 14 Aug 2003 10:26:24 +0200
Lines: 22
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
X-Posted-By: 212.199.103.105
Subject: Re: PHP 4.3.3RC3 Released
From: mosdoron@netvision.net.il ("moshe doron")

"Ilia Alshanetsky" <ilia@prohost.org> wrote in message
news:<200308071447.03285.ilia@prohost.org>...

> I would like to ask that all developers refrain from making commits to

> the 4_3 tree until 4.3.3 final is released, unless a patch addresses a

> critical issue. Critical issues are defined as the following:

> 1) Security Fixes

What about hacking somehow the sqlite library to disallow chained queries
(or at least do it optionally)?

This behavior is *huge* security hole, allow to the cracker drop ur database
using simple select where query.



moshe