[wp-hackers] SQL injection

[Robin Adrianse]

No need to be so sarcastic about it, I'm sure he just forgot to include the
URI.

On Dec 5, 2007 10:24 AM, Computer Guru <computerguru at neosmart.net> wrote:

> Back in the olden days before URIs were invented, people used to go on IRC
> and email and talk about something they'd seen in the massive, huge maze
> that was the world wide web.
>
> Because many times people had no idea exactly what tiny bit of the huge
> www
> it was that someone was referring to, they invented something called a
> URI,
> and it looks something like this: http://cnn.com/
>
> With this URI, it became possible for people to add a _link_ to an email
> or
> IRC message so that people receiving the message would know WTF the OP was
> referring to, and see it for themselves.
>
> -CG
>
> -----Original Message-----
> From: wp-hackers-bounces at lists.automattic.com
> [mailto:wp-hackers-bounces at lists.automattic.com] On Behalf Of Stefano
> Aglietti
> Sent: Wednesday, December 05, 2007 8:02 PM
> To: wp-hackers at lists.automattic.com
> Subject: [wp-hackers] SQL injection
>
> on security focus today there is a security problme about WP, I looked
> at it and I was unable to reproduce it, and the sql query sound
> strange cause it refer to non existent colum ind user database...
>
> I suppose that even if it's a true problem it won't work for feeds
> redirected to feedburner, right?
>
> Thanks for any info.
>
> --
>
> Stefano Aglietti - StallonIt on IRCnet - ICQ#: 2078431
> Email: steve at 40annibuttati.it steagl at people.it
> Sites: http://www.40annibuttati.it (personal blog)
>       http://www.wordpress-it.it (WordPress Italia)
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>