Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Look into checking for SQL injections #30

Open
firefly2442 opened this issue May 22, 2014 · 2 comments
Open

Look into checking for SQL injections #30

firefly2442 opened this issue May 22, 2014 · 2 comments
Labels

Comments

@firefly2442
Copy link
Owner

-Use of prepared procedures would help mitigate this. Add this to the readme.
-While it's explained in the readme NOT to use the root user and that there are no SQL sanity checks, this is clearly not enough and people are not paying attention. Add a check and disallow root user.
-Add in escaping for all queries to attempt to prevent exploits.

@firefly2442
Copy link
Owner Author

Also add note in readme explaining using the root Arma3 directory for the Databases.txt file is a potential security risk.

@firefly2442
Copy link
Owner Author

See 7b8dcf0, 96f6a73, 88bba70 among others. This will need to be mostly mitigated on the SQF mission side.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant