[imp] Bug in IMP 2.2.6: Escaped backslash in Preferences/signature

Fritz Zaucker zaucker@ee.ethz.ch
Sat, 4 Aug 2001 09:05:15 +0200 (MET DST)


On Fri, 3 Aug 2001, Rich Lafferty wrote:

> On Fri, Aug 03, 2001 at 06:43:56PM +0200, Fritz Zaucker (zaucker@ee.ethz.ch) wrote:

> This part's fine; the problem is that it's done /again/ in
> imp_set_signature in horde/imp/lib/db.mysql (and also for a handful
> of other functions in there). I don't use MySQL at all, though; I'd
> appreciate it if you (Fritz) or another MySQL user could test it for
> me. (The patch is appended below my .signature.)

I will try tomorrow, as I will have to leave in a minute and won't be
back before tomorrow night. I'll post my finding then.

> While I realize this isn't what you meant when you asked, we have to
> change db.mysql instead of prefs.php3 because all of the other
> database library files count on imp_set_* being handed sanitized
> data.

It's always better to fix the right code.

Thanks for helping to find the correct solution!

Fritz

-- 
Dr. Fritz Zaucker, Head IT Support Group
Department of Electrical Engineering,  Federal Institute of Technology
ETZ J97, Gloriastrasse 35, CH-8092 Zurich, Switzerland
Tel.: +41-1-632-5241 Fax: +41-1-632-1194 http://people.ee.ethz.ch/~zaucker/
E-mail: zaucker@ee.ethz.ch (see home page for PGP key)