search

lwerdna / bugtrack

bughouse rating and tracking software
GNU General Public License v3.0
4 stars 2 forks source link

Security improvements #15

Open thompGIT opened 12 years ago

thompGIT commented 12 years ago

Add code to validate inputs and to protect the SQLite backend.

lwerdna commented 12 years ago

also, convert statements to use "prepared statements" AKA "parameterized queries"

lwerdna commented 12 years ago

uses prepared statements now

some simple regex checks ensuring that names consist only of word characters, and scores/rds/times consist only of digit characters should finish this one off