ogb912/opensim
1
0
Fork 0
mirror of https://github.com/opensim/opensim.git synced 2026-08-01 06:06:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Plug a security hole in the inventory service

Browse Source
This commit is contained in:
Melanie
2011-10-31 10:18:25 +01:00
parent 083b28de8c
commit e431d5dae4
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
OpenSim/Data/MySQL/MySQLInventoryData.cs
View File

@@ -794,7 +794,8 @@ namespace OpenSim.Data.MySQL
{
dbcon.Open();
using (MySqlCommand cmd = new MySqlCommand("DELETE FROM inventoryfolders WHERE folderID=?uuid", dbcon))
// System folders can never be deleted. Period.
using (MySqlCommand cmd = new MySqlCommand("DELETE FROM inventoryfolders WHERE folderID=?uuid and type=-1", dbcon))
{
cmd.Parameters.AddWithValue("?uuid", folderID.ToString());