bug 1953 [1/2]: fixing SQL injection problem in C4::Context->preference
authorAndrew Moore <andrew.moore@liblime.com>
Wed, 23 Jul 2008 19:27:55 +0000 (14:27 -0500)
committerJoshua Ferraro <jmf@liblime.com>
Thu, 24 Jul 2008 16:25:58 +0000 (11:25 -0500)
commit551b95284ef1cc49016b2f5ebdf8c6e3993a7f2c
treeab8eb1bbfeb3a54ca9e19a69897a85580d0c4f7b
parentcd6d0c5d602f32f884959fb89489a335a4300744
bug 1953 [1/2]: fixing SQL injection problem in C4::Context->preference

C4::Context->preference was not using placeholders and was potentially vulnerable to
a SQL injectin attack. This patch refactors the method to use placeholders.

Added some tests for C4::Context.

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
C4/Context.pm
t/lib/KohaTest/Context.pm [new file with mode: 0644]
t/lib/KohaTest/Context/preference.pm [new file with mode: 0644]