[sakai] svn commit: r71460 - in msub/iu.edu/oncourse/trunk/msgcntr/messageforums-component-impl/src/java/org/sakaiproject/component/app/messageforums: . jobs

[bahollad at indiana.edu]

Details: http://source.sakaiproject.org/viewsvn?root=svn&view=rev&rev=71460

Author: bahollad at indiana.edu
Date: 2010-01-14 15:53:12 -0500 (Thu, 14 Jan 2010)
New Revision: 71460

Modified:
   msub/iu.edu/oncourse/trunk/msgcntr/messageforums-component-impl/src/java/org/sakaiproject/component/app/messageforums/SynopticMsgcntrManagerImpl.java
   msub/iu.edu/oncourse/trunk/msgcntr/messageforums-component-impl/src/java/org/sakaiproject/component/app/messageforums/jobs/UpdateSynopticMessageCounts.java
Log:
ONC-2371
SQL injection is possible due to accepting siteid as string input in SQL queries