newsObject Relational Membrane - News

 
 
Print summaries for the latest news.

Latest News Approved - With Summaries
PostgreSQL SQL injection vulnerability
     posted by diedrich, Wed May 24 08:12:42 2006 - 0 replies

This vulnerability is not so much a fault of Postgres, but one of PHP's addslashes(), which will convert certain Unicode sequences to quotes, allowing to add arbitrary SQL to a Web-Request. It seems, orm2's quoting functions, which are based on string.replace(), are too primitive to be fooled by this. Also they operate on Python single byte strings only, which makes sure we're on the save side.

Cheers Diedrich

Completed MySQL Adapter
     posted by diedrich, Thu May 4 12:09:07 2006 - 0 replies

This is the second alpha release of orm2. The core of orm is now basically feature complete. The user interface module is still at a design stage. I've completed the MySQL adapter and successfully run the regression tests on it. And comment or contribution is very welcome!

Freshmeat announcement
     posted by diedrich, Fri Apr 28 10:29:53 2006 - 0 replies

Thanks for looking in! In the CVS repository you'll find a module called orm2. It is a complete rewrite of orm with many new ideas! I have no documentation except extensive (epydoc) comments and a couple of examples and regression tests. I hope you'll still be able to make head and feet of this... Please do not hesitate to contact me with any question you might have.

Back to the top


Powered by Savane 3.1-cleanup1