今日已更新 255 条资讯 | 累计 28159 条内容
关于我们

开发者

编程技术、框架工具、最佳实践

7943
篇文章

共 7943 篇 · 第 388/398 页

Reddit r/webdev

Have you worked with a system that has both loose lot \ handling unit and dual inventory system?

Is there a system that can handle this? Handling units where one row in the DB can have both pieces and kg ex. HU Code 001; Article PART1; Lot code ABC; Location X; tracking qty 5pc; base qty 200kg Loose lot ex. Article PART2; Lot code XYZ; Location Y; tracking qty 100pc; base qty 2000kg This should be configurable per article family and inherited in the article... So i can have a part of articles in HU and part in loose lot... both carying 2 inventory unit of measurments.. submitted by /u/dirtyfrank22 [link] [留言]

/u/dirtyfrank22 2026-05-28 01:45 👁 4 查看原文 →
Reddit r/webdev

Anyone using Drupal? Set aside downtime for core security updates now!

🚨 URGENT: Highly Critical Drupal Core SQL Injection (CVE-2026-9082) Affecting PostgreSQL — Patch Immediately! The Drupal Security Team has released a "Highly Critical" security advisory ( SA-CORE-2026-004 / CVE-2026-9082 ) fixing a severe unauthenticated SQL injection vulnerability in Drupal Core. If you are running a Drupal site backed by a PostgreSQL database, you are at extreme risk. 📌 Vulnerability Overview CVE ID: CVE-2026-9082 Drupal Risk Score: 23/25 (Highly Critical) Attack Vector: Remote, Unauthenticated (Anonymous) HTTP requests Exploitation Status: ACTIVE IN-THE-WILD ATTACKS reported globally. CISA has officially added this flaw to its Known Exploited Vulnerabilities (KEV) catalog. Over 15,000 attack probes across thousands of sites have already been detected. Root Cause: A flaw in Drupal Core's database abstraction API—specifically within the PostgreSQL EntityQuery condition handler. Attacker-controlled PHP array keys reach SQL placeholder construction without proper sanitization, allowing arbitrary SQL execution. 💥 High Impact & Risks While Drupal estimates that less than 5% of installations use PostgreSQL, this configuration is heavily concentrated in enterprise, government, and higher-education environments. Successful exploitation grants: Full Database Access: Exfiltration of session tokens, sensitive data, and password hashes. Privilege Escalation: Promotion of standard or anonymous sessions to Administrator. Remote Code Execution (RCE): In PostgreSQL environments where database permissions are misconfigured (e.g., allowing COPY FROM PROGRAM ), attackers can pivot from SQL injection to executing arbitrary shell commands on the host server. 🔍 Affected Versions The flaw impacts all supported Drupal Core branches configured with PostgreSQL, including some legacy branches: Drupal Core 8.9.0 through 10.4.9 Drupal Core 10.5.x before 10.5.10 Drupal Core 10.6.x before 10.6.9 Drupal Core 11.1.x before 11.1.10 Drupal Core 11.2.x before 11.2.12 Drupal Core 11.

/u/OMGCluck 2026-05-28 01:15 👁 4 查看原文 →