I think the purpose of the secf_check_sqli_all() function is to prevent characters related to SQL injection, not to check for valid SIP syntax. In this context the filtering of single quotes is necessary. So this function is probably not useful for your purpose then. If you are concerned about blocking characters which are not valid according to the SIP grammar, you should use the sanity module.
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.