No kidding! I don't have time unfortunately to play with it too much, but I
added some pointers to the talk page:
Marko Milisavljevic wrote:
Try replacing:
$arc[] = "'" . $row->page_title . "'";
with:
$arc[] = $dbw->addQuotes($row->page_title);
Creating a two revision page about ';DROP TABLE user; --
http://xkcd.com/327/ ;)
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
http://lists.wikimedia.org/mailman/listinfo/mediawiki-l