The captcha.install still ships captcha_update_1 and captcha_update_2 which are unable to work on Drupal 7 due to their use of old functions. They also contain code which looks like an sql injection because they don't use db placeholders. There is not a sql injection, but it would be nice for code cleanliness and to reduce confusion with automated scanners (like coder module) to remove these.

#1 1717854_captcha_remove_old_updates.patch1.86 KBgreggles
PASSED: [[SimpleTest]]: [MySQL] 731 pass(es). View
Members fund testing for the Drupal project. Drupal Association Learn more


greggles’s picture

Status: Active » Needs review
1.86 KB
PASSED: [[SimpleTest]]: [MySQL] 731 pass(es). View
wundo’s picture

Status: Needs review » Reviewed & tested by the community

Looks good for me

wundo’s picture

Status: Reviewed & tested by the community » Fixed

Commited :)

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.