<html>
<head>
</head>
<body>
<div style="color: black;">
<div style="color: black;">
<p style="margin: 0 0 1em 0; color: black;">Hi,</p>
<p style="margin: 0 0 1em 0; color: black;">There are many using CP 6.1
with success. It may not be the best piece of software in the world but it
does its job.</p>
<p style="margin: 0 0 1em 0; color: black;">You say it's full of security
holes and exposed to sql injection. I invite you to try making some sql
injections and come back here with the proof. </p>
<p style="margin: 0 0 1em 0; color: black;">Also, there are lots of
security holes everywhere. If you think you've spotted some big ones in CP
please point them out so we can fix them. That's the whole idea with open
source software and the user community, right ?</p>
<p style="margin: 0 0 1em 0; color: black;">It's easy to point fingers but
hard to give a helping hand, right ?</p>
<p style="margin: 0 0 1em 0; color: black;">Regards,<br>
Alex Ionescu<br>
</p>
</div>
<div style="color: black;">
<p
style="color: black; font-size: 10pt; font-family: Arial, sans-serif; margin: 10pt 0;">On
August 10, 2015 4:47:25 AM Bill Shirley
<bill@philly.polymerindustries.biz> wrote:</p>
<blockquote type="cite" class="gmail_quote"
style="margin: 0 0 0 0.75ex; border-left: 1px solid #808080; padding-left: 0.75ex;">
Is anyone running the 6.1 CP? It's full of bugs and security
holes. Whoever thought it wise to code:<br>
<font color="#993300"> extract($_POST);</font><br>
Also, the input stored in the database is not sanitized plus a whole
lot more errors.<br>
<br>
<a class="moz-txt-link-freetext"
href="https://xkcd.com/327/">https://xkcd.com/327/</a><br>
We had a 'professional' company write a web portal for us that
didn't sanitize their input. I actually<br>
did do a "'; DROP TABLE `customer`;" on the database. I even
emailed them before hand pointing out<br>
the problem.<br>
<br>
I don't want to sound harsh or ungrateful. I run a lot of free
software that enables me to earn a living.<br>
I'm thankful for all the people that labored to produce the
software.<br>
<br>
I'm also guessing that CP 6.1 not meant to be run with the Fedora 22
version of OpenSIPS:<br>
[0:root@jabba lib]$ rpm -q php httpd opensips<br>
<font color="#993300">php-5.5.20-2.fc19.x86_64<br>
httpd-2.4.9-1.fc19.x86_64<br>
opensips-1.10.1-1.fc19.x86_64</font><br>
<br>
I'm trying to set up a SIP proxy to route calls from my network to
Cisco CUCM on another network.<br>
Any pointers are appreciated.<br>
<br>
Bill<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a class="aqm-autolink aqm-autowrap"
href="mailto:Users%40lists.opensips.org">Users@lists.opensips.org</a><br>
<a class="aqm-autolink aqm-autowrap"
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br></blockquote>
</div>
</div>
</body>
</html>