History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: UP-1606
Type: Bug Bug
Status: Open Open
Priority: Major Major
Assignee: Unassigned
Reporter: Naddy Lee
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
uPortal

DefaultDataHandlerImpl under cusermanager channel should use PreparedStatement

Created: 14/Nov/06 09:54 PM   Updated: 14/Nov/06 09:54 PM
Component/s: Error channel, Database
Affects Version/s: 2.5.3 GA
Fix Version/s: None

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown
Environment: Oracle 9i 2


 Description  « Hide
The class org.jasig.portal.channels.cusermanager.provider.DefaultDataHandlerImpl uses java.sql.Statement directly to execute sql strings which formated by java.text.MessageFormat, this causes a SQLException while I used Oracle as my database to change user's password in the Password Management channel with the error message: ORA-01843 : Invalid month, since Oracle 9i should use to_date function but not directly a string.

 All   Comments   Work Log   Change History   FishEye      Sort Order:
There are no comments yet on this issue.