1 Jul 2007 01:52
Re: smtp authentication using default domain
Jakob Hirsch <jh <at> plonk.de>
2007-06-30 23:52:36 GMT
2007-06-30 23:52:36 GMT
alexis wrote:
> sounds dangerous.
What sounds dangerous? Please use proper quoting.
If you meant the sql injection stuff: Just use quote_mysql with every
externally provided string. In your query, it would be $auth1, which is
already quoted in my example for the domain part. Just do the same with
local_part:
... WHERE username='${quote_mysql:${local_part:$1}}' ...
> and what about to define a variable before (pseudo code) i cannot
> realize how to do this with exim yet, im new using it.
There's no such thing in exim. There's no real need for it, anyway.
--
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
RSS Feed