The captcha.install still ships captcha_update_1 and captcha_update_2 which are unable to work on Drupal 7 due to their use of old functions. They also contain code which looks like an sql injection because they don't use db placeholders. There is not a sql injection, but it would be nice for code cleanliness and to reduce confusion with automated scanners (like coder module) to remove these.

#1 1717854_captcha_remove_old_updates.patch1.86 KBgreggles
PASSED: [[SimpleTest]]: [MySQL] 731 pass(es).
[ View ]


greggles’s picture

Status:Active» Needs review
new1.86 KB
PASSED: [[SimpleTest]]: [MySQL] 731 pass(es).
[ View ]
wundo’s picture

Status:Needs review» Reviewed & tested by the community

Looks good for me

wundo’s picture

Status:Reviewed & tested by the community» Fixed

Commited :)

Status:Fixed» Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.