summaryrefslogtreecommitdiffstats
path: root/user_guide/changelog.html
diff options
context:
space:
mode:
authorDerek Jones <derek.jones@ellislab.com>2008-09-24 20:22:03 +0200
committerDerek Jones <derek.jones@ellislab.com>2008-09-24 20:22:03 +0200
commitd16bab12339fe2746e1ead72ba96351c3423c27c (patch)
tree636ce46d0cb6e2e8a0d777b23ea79da3defea183 /user_guide/changelog.html
parentc184b3beda28be9c5815fdfc1be7aa79c8b84b16 (diff)
added removal of non-printing characters to escape_str() of drivers that do not have native PHP escaping mechanisms
Diffstat (limited to 'user_guide/changelog.html')
-rw-r--r--user_guide/changelog.html6
1 files changed, 6 insertions, 0 deletions
diff --git a/user_guide/changelog.html b/user_guide/changelog.html
index bad3d089e..94e41a893 100644
--- a/user_guide/changelog.html
+++ b/user_guide/changelog.html
@@ -74,6 +74,12 @@ SVN Revision: XXXX</p>
<li>Changed the output of the profiler to use style attribute rather than clear, and added the id "codeigniter_profiler" to the container div</li>
</ul>
</li>
+ <li>Database
+ <ul>
+ <li>Added removal of non-printing control characters in escape_str() of DB drivers that do not have native PHP escaping mechanisms (mssql, oci8, odbc), to avoid
+ potential SQL errors, and possible sources of SQL injection.</li>
+ </ul>
+ </li>
<li>Helpers
<ul>
<li>Added several new "setting" functions to the <a href="helpers/form_helper.html">Form helper</a> that allow POST data to be retrieved and set into forms. These are intended to be used on their own, or with the new <a href="libraries/form_validation.html">Form Validation Class</a>.</li>