En tout cas, il me semble urgent de répondre au gars (quitte à avoir la base de données PORTAIL effacée) Jorge Garcia Flores Ingénieur de recherche CNRS LIPN - Université Paris 13 http://lipn.univ-paris13.fr/~garciaflores/ Le 02/02/2018 à 05:59, Jorge Garcia Flores a écrit :
Mr Panggau:
Thanks for detecting the security hole. We are perfectly aware of the dangers that SQL injection represents to our data. We will look thoroughly to protect our code from it.
As a public education institution, we might be too busy providing free education for our students and we surely lack the necessary time and funding ressources to protect our code as it should.
Your help would be highly appreciated (you are already helping us by detecting the failure). What collaboration options are you considering?
Best regards