[otrs-cvs] ITSMChangeManagement/Kernel/System ITSMChange.pm, 1.285, 1.285.2.1

Comments:
Update of /home/cvs/ITSMChangeManagement/Kernel/System
In directory lancelot:/tmp/cvs-serv17288/Kernel/System

Modified Files:
      Tag: rel-3_2
	ITSMChange.pm 
Log Message:
Improved quoting for integer values to avoid possible security issues.

Author: ub

Index: ITSMChange.pm
===================================================================
RCS file: /home/cvs/ITSMChangeManagement/Kernel/System/ITSMChange.pm,v
retrieving revision 1.285
retrieving revision 1.285.2.1
diff -2 -u -d -r1.285 -r1.285.2.1
--- ITSMChange.pm	31 May 2013 13:59:30 -0000	1.285
+++ ITSMChange.pm	28 Jun 2013 13:03:52 -0000	1.285.2.1
@@ -1982,7 +1982,7 @@
         next WORKORDERPARAM if !@{ $Param{$WorkOrderParam} };
 
-        # quote
+        # quote as integer
         for my $OneParam ( @{ $Param{$WorkOrderParam} } ) {
-            $OneParam = $DBObject->Quote($OneParam);
+            $OneParam = $DBObject->Quote( $OneParam, 'Integer' );
         }
 
---------------------------------------------------------------------
OTRS mailing list: cvs-log - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/cvs-log
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/cvs-log