pgsql.com problem.
I emailed info@pgsql.com, cc'ed scrappy@hub.org about a suspected SQL
injection problem somewhere on the site more than 3 weeks ago. No response
till now, behaviour still seems the same.
Any idea how I should go about this?
e.g. correct contacts to use, or it's not a actually problem - the user
authorization/db is configured securely so even though different SQL
statements can be specified and executed, they won't be able to alter data
(I haven't tried to alter data).
Regards,
Link.
Hrmm? I don't recall receiving this, but if you wish to re-email me,
please do ...
On Fri, 31 Jan 2003, Lincoln Yeoh wrote:
Show quoted text
I emailed info@pgsql.com, cc'ed scrappy@hub.org about a suspected SQL
injection problem somewhere on the site more than 3 weeks ago. No response
till now, behaviour still seems the same.Any idea how I should go about this?
e.g. correct contacts to use, or it's not a actually problem - the user
authorization/db is configured securely so even though different SQL
statements can be specified and executed, they won't be able to alter data
(I haven't tried to alter data).Regards,
Link.---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
On Thu, 2003-01-30 at 14:12, Lincoln Yeoh wrote:
I emailed info@pgsql.com, cc'ed scrappy@hub.org about a suspected SQL
injection problem somewhere on the site more than 3 weeks ago. No response
till now, behaviour still seems the same.Any idea how I should go about this?
I'm assuming the above sentence means "I still haven't gotten a
response" not "I hadn't received a response until now".
Your contacts above should have worked, though perhaps they got lost in
the shuffle. If you want to contact me offline, I can look into it for
you and rattle any cages if need be.
Robert Treat