Project

General

Profile

Actions
Copy link

Bug #3268

closed

Load balancer needs input validation to prohibit reserved table names

Added by Chris Buechler about 11 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Load Balancer
Target version:
2.1.1
Start date:
10/15/2013
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

Reserved table names aren't prohibited from being entered as a table name in load_balancer_pool_edit.php. At least <ssl> is prohibited, and can find others from our alias code input validation I believe. Using "ssl" as the name results in a relayd syntax error, and I'm sure similar for other reserved keywords, just don't have time for in depth testing at the moment.

Actions
Copy link

Also available in: Atom PDF