Commit Graph

9 Commits

Author SHA1 Message Date
David Anderson d403a14e42 - web: cleaned up logic of string processing.
There are two aspects:
    1) undoing magic quotes (if it's being used).
        This must be done for all GET and POST string inputs.
        It is now done automatically by get_str() and post_str().
        The places that refer to $_GET and $_POST directly
        must do it themselves using undo_magic_quotes().
    2) Escaping user-supplied strings before using them in DB queries.
        This is done by process_user_text()
        (which should be renamed db_escape_string()).
        The new principle:
        call process_user_text() in the function that does the DB query
        (not at any higher level).


svn path=/trunk/boinc/; revision=15389
2008-06-11 19:36:10 +00:00
David Anderson b8877e887e - add weak auth to am_get_info web RPC (from Nicolas)
svn path=/trunk/boinc/; revision=14661
2008-02-02 15:38:59 +00:00
David Anderson 02bb061b6d *** empty log message ***
svn path=/trunk/boinc/; revision=11117
2006-09-06 20:56:55 +00:00
David Anderson d1eef2c6ca *** empty log message ***
svn path=/trunk/boinc/; revision=10069
2006-05-01 16:41:27 +00:00
David Anderson 58d94e2f65 add venue to RPC params
svn path=/trunk/boinc/; revision=8850
2005-11-13 06:48:26 +00:00
David Anderson bfed4b81aa *** empty log message ***
svn path=/trunk/boinc/; revision=5782
2005-04-05 21:26:41 +00:00
David Anderson a95f0c33bd *** empty log message ***
svn path=/trunk/boinc/; revision=5724
2005-03-28 22:26:22 +00:00
David Anderson 7e4801d6f7 *** empty log message ***
svn path=/trunk/boinc/; revision=5705
2005-03-23 19:25:00 +00:00
David Anderson 2534035cae *** empty log message ***
svn path=/trunk/boinc/; revision=5527
2005-02-25 00:41:22 +00:00