View | Details | Raw Unified | Return to bug 36244
Collapse All | Expand All

(-)a/installer/data/mysql/atomicupdate/bug_36244.pl (-1 / +27 lines)
Line 0 Link Here
0
- 
1
use Modern::Perl;
2
3
return {
4
    bug_number  => "36244",
5
    description => "Template Toolkit syntax not escaped in letter templates",
6
    up          => sub {
7
        my ($args) = @_;
8
        my ( $dbh, $out ) = @$args{qw(dbh out)};
9
10
        my $query = q{SELECT * FROM letter WHERE content LIKE "[|%%SET%<<%|%]" ESCAPE '|'};
11
        my $sth   = $dbh->prepare($query);
12
        $sth->execute();
13
        if ( $sth->rows ) {
14
            say $out "You have one or more templates that have been affected by bug 36244.";
15
            say $out "These templates assign template toolkit variables values";
16
            say $out "using the double arrows syntax. E.g. [% SET name = '<<branches.branchname>>' %]";
17
            say $out
18
                "This will no longer function correctly as Template Toolkit is now rendered before the double arrow syntax.";
19
            say $out "The following notices will need to be updated:";
20
21
            while ( my $row = $sth->fetchrow_hashref() ) {
22
                say $out
23
                    "ID: $row->{id} / MODULE: $row->{module} / CODE: $row->{code} / BRANCHCODE: $row->{branchcode} / NAME: $row->{name}";
24
            }
25
        }
26
    },
27
};

Return to bug 36244