This function incorrectly calls blocks rather than block (plural DB got dropped from core) and also has a security update to back-port if D6 is supported.

CommentFileSizeAuthor
#2 biblio-2856487-2-biblio_update_6026-is-broken.patch969 bytesalan d.

Comments

Alan D. created an issue. See original summary.

alan d.’s picture

alan d. commented
Priority: Normal » Major
Status: Active » Needs review
StatusFileSize
new biblio-2856487-2-biblio_update_6026-is-broken.patch969 bytes

The security issue, the title is not sanitized.

Major for the update script being broken, this would never run on an D7 site!

Alternatively, make it a policy to run updates on D6 to biblio 6.x-1.18, then just delete the old D6 crap biblio_update_6027() and below....

liam morland’s picture

liam morland
Primary language English
Location Ontario, CA 🇨🇦
commented
Parent issue: » #2856491: Biblio Security Vulnerabilities

liam morland’s picture

liam morland
Primary language English
Location Ontario, CA 🇨🇦
commented
Status: Needs review » Fixed

Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.