Skip to content

fix for 9 critical SQL Injections

chandi requested to merge audit/fixes-critical into master

fixes a bunch of SQL injections. see #472 (closed)

list

  • SQL Injection in GeoCleanXhr::masterupdate()
  • SQL Injection in BellGateway::setBellsAsSeen()
  • SQL Injection in MessageModel::getBetriebname()
  • SQL Injection in MessageModel::getChatMembers()
  • SQL Injection in MessageModel::addConversation()
  • SQL Injection in MessageModel::loadConversationMessages()
  • SQL Injection in QuizModel::getExsistingSession()
  • SQL Injection in SettingsModel::logChangedSetting()
  • SQL Injection in WorkGroupModel::updateTeam()

Merge request reports