i don't exactly know why, but the current HEAD has some missing code. this patch corrects that and factors out a function to figure out what is the right encryption scheme configured, securely so that admins can't inject an arbitrary SQL function in there...

CommentFileSizeAuthor
#2 scheme_0.patch1.9 KBanarcat
scheme.patch1.9 KBanarcat

Comments

Bèr Kessels’s picture

Bèr Kessels commented

committed thanks.

anarcat’s picture

anarcat commented
StatusFileSize
new scheme_0.patch1.9 KB

oups! a wrong line in there, i re-upload the patch.

note that this will be useful for external modules that need to communicate with the external database... instead of reimplementing the controls in each depending module, i'd rather use this patch...

Bèr Kessels’s picture

Bèr Kessels commented

fixed too

anarcat’s picture

anarcat commented
Component: Code » sql_auth core
Status: Needs review » Fixed

we can close this, i tested it and it works, at least with the ENCRYPT() method, which is the most complex, so I figure everything is OK.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)