| Subject: | FIX: Security probrem |
| Date: | Sat, 10 Feb 2007 22:55:10 +0900 |
| To: | bug-JSON [...] rt.cpan.org |
| From: | seagull <seagull [...] mitsuki.no-ip.com> |
Hi.
I wrote patch to against JSON-1.0.7
... RPC handler package
package MyApp::RPC;
use MyApp::Schema;
sub findUser { my $rows = MyApp::Schema::execute('select * from
users'; ... }
... Main package
my $rpc = JSONROC::Transport::HTTP::Daemon
->new()->dispatch_to('MyApp::RPC')->handle();
In this code exports 'MyApp;;Schema' package implicitly.
Any client can call a method 'MyApp::Schema::execute' and take any SQL
result.
--
seagull <seagull@mitsuki.no-ip.com>
Message body is not shown because sender requested not to inline it.