I would like to warn everyone not to use Hoteldruid with Postgres.
There is a serious bug which enables attackers to inject arbitrary sql commands which can result in the takeover of the database!
How can I contact the dev in private?
Search found 7 matches
- Wed May 07, 2014 11:40 am
- Forum: Bugs and errors
- Topic: Hoteldruid not safe with Postgres
- Replies: 1
- Views: 22337
- Wed May 07, 2014 11:36 am
- Forum: Bugs and errors
- Topic: Translations
- Replies: 1
- Views: 22137
Translations
I would like to know who did the German translations.
It's full of errors like mixing up commissions with discounts etc. Very confusing for some users!
Is there a way to contribute to the translations?
It's full of errors like mixing up commissions with discounts etc. Very confusing for some users!
Is there a way to contribute to the translations?
- Sun May 04, 2014 3:04 pm
- Forum: Suggestions and new features requests
- Topic: Encryption
- Replies: 1
- Views: 21553
Encryption
In the light of the 'NSA scandal' how easy would it be for you to add (optional) encryption of sensitive data (client data and documents)? I read that your server is located in London - i.e. a country where , among other laws, anti terror legislation makes it easy for authorities to seize any server...
- Fri May 02, 2014 6:07 pm
- Forum: Hosting on DigitalDruid.Net and add-on modules
- Topic: back end servers and language support
- Replies: 1
- Views: 25042
back end servers and language support
The default database when installing hoteldruid is sqlite. I changed it to postgres which is the default db software on Debian. Found A few problems (see other post) so I assume that on the hosted service postgres is not used. That leaves Mysql - (since havinǵ the sqlite db in a world readable direc...
- Wed Apr 30, 2014 3:03 pm
- Forum: Bugs and errors
- Topic: Syntax Error with postgresql
- Replies: 2
- Views: 25111
- Thu Apr 24, 2014 11:58 am
- Forum: Bugs and errors
- Topic: .deb missing on download page
- Replies: 0
- Views: 54693
.deb missing on download page
Debian package is missing for 2.1
- Wed Apr 23, 2014 9:04 pm
- Forum: Bugs and errors
- Topic: Syntax Error with postgresql
- Replies: 2
- Views: 25111
Syntax Error with postgresql
trying out Hoteldruid 2.1 on Debian wheezy with Postgres 9.1 When trying to make a reservation I get: ERROR in: select * from regole2014 where (tariffa_commissioni != '' and tariffa_commissioni is not NULL) or (tariffa_chiusa != '' and tariffa_chiusa is not NULL) order by iddatainizio ERROR in: sele...