Bug 1953: removing potential SQL injections from C4::Calendar::_init
authorAndrew Moore <andrew.moore@liblime.com>
Tue, 13 May 2008 17:00:55 +0000 (12:00 -0500)
committerJoshua Ferraro <jmf@liblime.com>
Tue, 13 May 2008 22:41:21 +0000 (17:41 -0500)
commit5d2fde5d587100e1c00e629c8cc21acb956aba6f
tree6f239e62b9c549da7e9d28e529e95cc7639580b1
parentc6d5b75d6d16bc75b23ef4c7bdf82bfb3eea87db
Bug 1953: removing potential SQL injections from C4::Calendar::_init

This patch changes the 4 select statements in C4::Calendar::_init.
tests for this method were included in a previous patch.

There are more potential problems in C4::Calendar::delete_holiday, but that
method seems to have deeper bugs than just these. I'll open another bug for
them if I can figure out how it's supposed to work.

No documentation changes necessary.

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
C4/Calendar.pm