Commit 8bcf848088f630bdd77116c70d25821fd8e99142

Authored by Eriksen Costa Paixão
1 parent 242072c5
Exists in master

by Eriksen: Removido código que permitia exposição de queries SQL

Showing 1 changed file with 5 additions and 13 deletions   Show diff stats
ieducar/intranet/include/clsBancoPgSql.inc.php
... ... @@ -21,6 +21,11 @@
21 21 * endereço 59 Temple Street, Suite 330, Boston, MA 02111-1307 USA.
22 22 */
23 23  
  24 +require_once 'clsConfigItajai.inc.php';
  25 +require_once 'include/clsCronometro.inc.php';
  26 +require_once 'include/clsEmail.inc.php';
  27 +
  28 +
24 29 /**
25 30 * clsBancoSQL_ class.
26 31 *
... ... @@ -30,11 +35,6 @@
30 35 * @since Classe disponível desde a versão 1.0.0
31 36 * @version $Id$
32 37 */
33   -
34   -require_once 'clsConfigItajai.inc.php';
35   -require_once 'include/clsCronometro.inc.php';
36   -require_once 'include/clsEmail.inc.php';
37   -
38 38 class clsBancoSQL_ {
39 39  
40 40 protected $strHost = NULL; // Nome ou endereço IP do servidor do banco de dados
... ... @@ -209,14 +209,6 @@ class clsBancoSQL_ {
209 209  
210 210 $this->strStringSQL = eregi_replace( "([a-z_0-9.]+) +ILIKE +'([^']+)'", "to_ascii(\\1) ILIKE to_ascii('\\2')", $this->strStringSQL );
211 211 $this->strStringSQL = eregi_replace( "fcn_upper_nrm", "to_ascii", $this->strStringSQL );
212   - /*
213   - Verificacoes de Injection
214   - */
215   - if($_GET['depurar'] == 'mostraasquerypramim')
216   - {
217   - echo $this->strStringSQL."<br><br>";
218   - }
219   -
220 212  
221 213 $temp = explode( "'", $this->strStringSQL );
222 214 for ( $i = 0; $i < count( $temp ); $i++ )
... ...