Koha-clms/reports
David Cook 953cee569f
Bug 42361: Fix SQL injection in catalogue_out.pl
This change removes an SQL injection vulnerability from catalogue_out.pl

Test plan:
0. Apply the patch
1. Go to koha-conf.xml and change the following:
<strict_sql_modes>1</strict_sql_modes>
to:
<strict_sql_modes>0</strict_sql_modes>
2. sudo koha-plack --restart kohadev
3. Go to /cgi-bin/koha/reports/catalogue_out.pl
4. Try out the various options and note no errors occur

Signed-off-by: Sanjar Tulkinov Anvar o'g'li <sanjarbiy11@gmail.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
2026-06-05 14:02:38 -06:00
..
acquisitions_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
bor_issues_top.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
borrowers_out.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
borrowers_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
cash_register_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
cat_issues_top.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
catalog_by_itemtype.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
catalogue_out.pl Bug 42361: Fix SQL injection in catalogue_out.pl 2026-06-05 14:02:38 -06:00
catalogue_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
dictionary.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
guided_reports.pl Bug 38414: (follow-up) Fix OR operator 2026-06-05 14:02:37 -06:00
issues_avg_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
issues_stats.pl Bug 41715: Argument "YYYY-MM-DD" isn't numeric in numeric lt (<)... warnings in issues_stats.pl 2026-05-23 15:58:46 -04:00
itemslost.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
orders_by_fund.pl Bug 40163: (follow-up) Fix wrong GNU links and update test 2026-01-07 14:32:37 +00:00
reports-home.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
reserves_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00
serials_stats.pl Bug 40163: Fix several http addresses in the code docs 2026-01-07 14:32:30 +00:00