Two specific problems are addressed inand , this fixes two remaining issues which are actually in user.install and system.install, but at least the code in system.install is only run on postgresql and I feel already bad creating yet another critical :)
Changes in this patch:
- Change "user.picture <> 0" to "user.picture <> ''". Should be obvious :)
- Escape field names
- Make the DROP DOMAIN queries a bit more error-proof by adding an IF EXISTS.
The problem with the system update function is that, if I understood it correctly, it actually runs on the whole database. If there are other tables in the same database, they will be affected too. Maybe that needs to be addressed as well but is probably not critical...