* Qual: Remove SQL injection suppressions from Phan baseline # Qual: Remove SQL injection suppressions from Phan baseline - Removed SqlInjection suppressions from baseline.txt - Removed SqlInjectionUnquotedEscape suppressions from baseline.txt * Qual: Improve SQL query escaping and formatting in contact list # Qual: Improve SQL query escaping and formatting in contact list Improved the SQL query escaping for compatibility with SqlInjection. Does not fix the inappropriate/incomplete escaping through usage of the 'escapeforlike' for REGEX or PGSQL '~'. * Qual: Add SQLInjection suppression comments # Qual: Add SQLInjection suppression comments Added SQLInjection suppression directives: - In modules_import.class.php, for json_encode operations. - In html.formproduct.class.php, for expression "sanitized" by $db->order(). - In html.formwebportal.class.php, for the WHERE clause conditions (supposes safe argument). --------- Co-authored-by: Laurent Destailleur <eldy@destailleur.fr> |
||
|---|---|---|
| .. | ||
| import_csv.modules.php | ||
| import_xlsx.modules.php | ||
| modules_import.class.php | ||