Quote:
Originally Posted by Brains
Ahh, I see... I took a much more "traditional" porting approach, and changed all the code over to more SQL92-style queries throughout, and then wrote a new class-core.php that supports PostgreSQL. With further tweaking, the application would be able to directly support both MySQL or PostgreSQL with just a change in config.php (instantiating the proper class in class-core.php). Doubtful that I'll finish that up, because PG is doing what I want it to, but the possibility is there.
|
The problem is that when you do this you always have to re-update your code, when VB comes out with a new version. And I am just not willing to do this for every XSS they discover.
Which is why I thought about creating a sophisticated parser which is run inside vbquery().