rvelices 726529c49b merge r2483 from branch 1.7 ...

- security fix : when conf['question_mark_in_urls']=true , $_SERVER['PATH_INFO'] was not sanitized against sql injection
- mysql errors are now dumped using trigger_error instead of echo and die -> allow admins to see later on if someone tries funny stuff

git-svn-id: http://piwigo.org/svn/trunk@2484 68402e56-0260-453c-a942-63ccdbb3a9ee

2008-08-23 01:18:13 +00:00

41 KiB

Raw Blame History

View Raw