centstorage and backslash issue

[centreon]

---

Author Name: Sylvestre Ho (Sylvestre Ho)
Original Redmine Issue: 2653, https://forge.centreon.com/issues/2653
Original Date: 2011-09-26
Original Assignee: Maximilien Bersoult

---

Hi,

There is no escaping method used in centstorage, could the door be opened to sql injections?
We should use quote methods as much as possible.

Also, the backslash issue doesn't seem to be solved as of version 2.2 and 2.3. Adding quote methods does solve the problem!

This change requires some solid testing before validation though.

[centreon]

---

Original Redmine Comment
Author Name: Sylvestre Ho (Sylvestre Ho)
Original Date: 2011-09-26T11:32:26Z

---

trunk => revision r12534

[centreon]

---

Original Redmine Comment
Author Name: Sylvestre Ho (Sylvestre Ho)
Original Date: 2011-09-26T11:59:10Z

---

branch 2.2.x => revision r12536

I'll leave this case open until validation

[centreon]

---

Original Redmine Comment
Author Name: Sylvestre Ho (Sylvestre Ho)
Original Date: 2011-10-03T11:11:14Z

---

Max,

Could you please proceed with a migration (2.1.x => 2.3.0) and make sure that metrics that contain #S# and #BS# are properly carried over and that CentStorage keeps graphing properly afterwards.

Thanks :-)