Changeset 28899 for main/trunk/greenstone2/runtime-src/src/recpt/securitytools.h

Timestamp:

2014-03-14T22:46:25+13:00 (10 years ago)

Author:

ak19

Message:

Third commit for security, for ensuring cgiargs macros are websafe. This time all the changes to the runtime action classes.

File:

• main/trunk/greenstone2/runtime-src/src/recpt/securitytools.h (modified) (2 diffs)

main/trunk/greenstone2/runtime-src/src/recpt/securitytools.h

@@ -28 +28 @@
 text_t encodeForHTMLAttr(const text_t& input, const text_t& immuneChars=IMMUNE_HTMLATTR);
 text_t encodeForCSS(const text_t& input, const text_t& immuneChars=IMMUNE_CSS);
-text_t encodeForMySQL(const text_t& input, const text_t& immuneChars=IMMUNE_SQL, const SQLMode mode=STANDARD);
+// C++ port of OWASP-ESAPI for MySQL, not sure if this is is the same for SQLite
+text_t encodeForSQL(const text_t& input, const text_t& immuneChars=IMMUNE_SQL, const SQLMode mode=STANDARD);
 
 // Character conversions
@@ -35 +36 @@
 text_t encodeForJavascript(const text_t& immuneChars, const unsigned short input, bool dmsafe);
 text_t encodeForCSS(const text_t& immuneChars, const unsigned short input);
-text_t encodeForMySQL(const text_t& immuneChars, const unsigned short input, const SQLMode mode);
+text_t encodeForSQL(const text_t& immuneChars, const unsigned short input, const SQLMode mode);