Dne 16.4.2014 13:56, Christian Mack napsal(a):
> http://wiki.sogo.nu/ResourceConfiguration

Little offtopic: There is BASH script for adding resources on that page
which can cause SQL injection.
In this particular case it might not be too dangerous if the script is
operated by a wise administrator.
But it is more safe to use some programming language which supports
parametrized queries or some tool like SQL-DK
<https://sql-dk.globalcode.info/> (my tool, free software)
Then you can write:

sql-dk
    --db my_database
     --sql "
        USE sogo;
        INSERT INTO sogo_users
            (c_uid, c_name, c_password, c_cn, mail, kind, multiple_bookings)
        VALUES
            (?, ?, md5(?), ?, ?, ?, ?);"
    --data "$username" "$username" "$password" "$name" "$email"
"location" "1"

Franta
-- 
[email protected]
https://inverse.ca/sogo/lists

Reply via email to