SQL injection fix

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 33eeda9f1c46826a572ea0d5cbaca16d7cde5f87..d26379f69b2197374fa92c193e958a03c430864d 100644 (file)
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -19,6 +19,10 @@ Legend:
 ! -> Note
 $ -> Affected files
 
+12-Oct-2009 Janusz Dobrowolski
+# Fixed sql injection vulnerability on some php/mysql configurations
+$ /admin/db/users_db.inc
+
 11-Oct-2000 Joe Hunt
 # [0000168] Undefined variable: paylink in file rep110.php
 $ /reporting/rep110.php