Fix to prevent SQL injection attacks for code calling setObject(int,Object,int)
Barry Lind <barry@xythos.com>
Fix to prevent SQL injection attacks for code calling setObject(int,Object,int) where Object is a user supplied String and the type is a numeric type (i.e. INTEGER,LONG,etc). Also applied a patch from Kim Ho that fixes compile problems under jdk1.2 Modified Files: jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
Files
| Path | Change | +/− |
|---|---|---|
| src/interfaces/jdbc/org/postgresql/Driver.java.in | modified | +2 −2 |
| src/interfaces/jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java | modified | +41 −23 |