No escaping in sql script in function DBupdate_graph()

XMLWordPrintable

    • Type: Incident report
    • Resolution: Fixed
    • Priority: Major
    • 1.4.5
    • Affects Version/s: 1.4.5
    • Component/s: None
    • None

      http://www.zabbix.com/forum/showthread.php?t=10065

      Index: src/libs/zbxdbhigh/host.c
      ===================================================================
      — src/libs/zbxdbhigh/host.c (revision 5827)
      +++ src/libs/zbxdbhigh/host.c (working copy)
      @@ -1214,7 +1214,7 @@
      "yaxistype=%i,yaxismin=%i,yaxismax=%i,templateid=" ZBX_FS_UI64 ","
      "show_work_period=%i,show_triggers=%i,graphtype=%i,"
      "show_legend=%i,show_3d=%i where graphid=" ZBX_FS_UI64,

      • name,width,height,yaxistype,yaxismin,yaxismax,templateid,show_work_period,show_triggers,graphtype,
        + name_esc,width,height,yaxistype,yaxismin,yaxismax,templateid,show_work_period,show_triggers,graphtype,
        show_legend,show_3d,graphid);

      zbx_free(name_esc);

            Assignee:
            Alexander Vladishev
            Reporter:
            Alexander Vladishev
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: