diff options
| author | Barry Lind <barry@xythos.com> | 2003-07-22 05:13:05 +0000 |
|---|---|---|
| committer | Barry Lind <barry@xythos.com> | 2003-07-22 05:13:05 +0000 |
| commit | 5d882f78aed1fb24e3d3a7a83c9a6b8e50bd99fc (patch) | |
| tree | 1c1b20311b35a53621b4af23538bca9099f5546e /src/interfaces/jdbc/org/postgresql/Driver.java.in | |
| parent | 004d2be5d939693da2bf650e5abe4a0293d121d1 (diff) | |
Fix to prevent SQL injection attacks when calling setObject(int,Object,int)
where the Object is a String and the type is numeric (i.e. INTEGER,LONG,etc).
The fix applies the standard escaping for these values.
Modified Files:
Tag: REL7_3_STABLE
jdbc/org/postgresql/Driver.java.in
jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
Diffstat (limited to 'src/interfaces/jdbc/org/postgresql/Driver.java.in')
| -rw-r--r-- | src/interfaces/jdbc/org/postgresql/Driver.java.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/interfaces/jdbc/org/postgresql/Driver.java.in b/src/interfaces/jdbc/org/postgresql/Driver.java.in index 4d27f3da573..164c1d056b4 100644 --- a/src/interfaces/jdbc/org/postgresql/Driver.java.in +++ b/src/interfaces/jdbc/org/postgresql/Driver.java.in @@ -446,6 +446,6 @@ public class Driver implements java.sql.Driver } //The build number should be incremented for every new build - private static int m_buildNumber = 110; + private static int m_buildNumber = 111; } |