Legacy MySQL Scanner
3 posts by 2 authors in: Forums > CMS Builder: Plugins & Add-ons
Last Post: November 6, 2018 (RSS)
By gversion - November 1, 2018
Hello,
When I run the Legacy MySQL Scanner on the latest version of cmsb (v3.15 (Build 2209)) I see the following legacy code:
/cmsb/lib/schema_functions.php
mysql_encrypt_column -
/cmsb/lib/mysql_functions.php
mysql_decrypt_addSelectExpr -
mysql_decrypt_column -
mysql_encryptExpr_colsToValues -
mysql_encrypt_column -
mysql_encrypt_listColumns -
mysql_isSupportedColumn -
/cmsb/lib/menus/admin/general.php
mysql_encrypt_listColumns -
/cmsb/lib/menus/default/save.php
mysql_encryptExpr_colsToValues -
/cmsb/lib/menus/database/editField_functions.php
mysql_decrypt_column -
mysql_encrypt_column -
mysql_isSupportedColumn -
/cmsb/lib/upgrade_functions.php
mysql_encrypt_listColumns -
/cmsb/lib/viewer_functions.php
mysql_decrypt_addSelectExpr -I guess you guys will be updating this in a future release of cmsb? Or is it not necessary to?
Thank you,
Greg
By Dave - November 6, 2018
Hi Greg,
Thanks for reporting that. Those are false-positives you can safely ignore those or update /plugins/legacyMySQLScanner.php as follows:
Replace the $GLOBALS['LMSCANNER_SKIP_SUFFIXES'] = [ line with:
// these are mysql_* suffixes to skip because they're no related to legacy mysql_ functions
$GLOBALS['LMSCANNER_SKIP_SUFFIXES'] = [
'count',
'datetime',
'decrypt_addSelectExpr',
'decrypt_column',
'decrypt_getColumnsNamesOrExpr',
'delete',
'do',
'encrypt_column',
'encrypt_listColumns',
'encryptExpr_colsToValues',
'escape',
'escapecsv',
'escapef',
'escapeLikeWildcards',
'fetch',
'get',
'get_lock',
'get_query',
'getcolstovaluesfromrequest',
'getMysqlSetValues',
'getvaluesascsv',
'insert',
'isConnected',
'isSupportedColumn',
'limit',
'query_fetch_all_array',
'query_fetch_all_assoc',
'query_fetch_row_array',
'query_fetch_row_assoc',
'release_lock',
'select',
'select_count_from',
'select_query',
'session_storage',
'set',
'update',
'where',
];And I'll update that for the next version as well. Thanks!
interactivetools.com