Autore: Thorkild Stray Data: To: exim-users Nuovi argomenti: [Exim] Virtual Users Oggetto: Re: [Exim] mysql (Problem with smartuser.)
[Peter Radcliffe <pir@???>:] > This started me wondering ... user supplied data straight into a mysql
> query. If you managed to get the right characters into local_part
> couldn't you end up doing a random query that could be destructive ?
Yes, this is why I already do a lot of checking on the values. I left
some of it out here.
> Shouldn't this probably be wrapped with
> ${quote_mysql:$local_part@$domain} ?
that's one of the things I am wondering about. How much escaping is
done? How much more should I think about?
