Package home | Report new bug | New search | Development Roadmap Status: Open | Feedback | All | Closed Since Version 0.8.0

Request #11288 Explicitly enter String mode
Submitted: 2007-06-11 20:13 UTC
From: sirzooro Assigned:
Status: Bogus Package: Text_Highlighter (version 0.7.0)
PHP Version: Irrelevant OS: N/A
Roadmaps: (Not assigned)    
Subscription  


 [2007-06-11 20:13 UTC] sirzooro (Daniel Fruzynski)
Description: ------------ I have an article about SQL Injection on my web page. Some of examples presents SQL code which will be inserted between apostrophes, e.g. the simplest one: ' or '1' = '1 Currently Text_Highlighter will highlight it incorrectly, because it assumes that 1st apostrophe opens string, while it closes it. Please add option to enter 'String mode' explicitly.

Comments

 [2007-06-11 20:28 UTC] stoyan (Stoyan Stefanov)
Thanks for the report, Daniel! Could you give me a link to your article to check the code you have troubles highlighting? Or paste some code here. I assume you're highlighting PHP code? Thanks, Stoyan
 [2007-06-12 05:42 UTC] sirzooro (Daniel Fruzynski)
I am talking about SQL language. My article is here: http://www.poradnik-webmastera.com/artykuly/bazy_danych/sql_injection.php It it written in Polish, so you may have trouble to understand it :). All samples are in grey boxes. Check ones which are not highlighted - each of them presents some SQL fragment which may be injected instead of 'valid' string value into SQL query.
 [2009-03-09 15:44 UTC] blindman (Andrey Demenev)
-Status: Open +Status: Bogus
I do not find this request neither relevant nor reasonable. We are highlighting source code in certain language - and expect correct code. If it is not correct, we cannot highlight it, as it is no more source code in that language.