PeopleBook sanitized 
Version
1.1.7
Rating
Compatibility
Votes
4
Favoured
3
License
GPL
Non-Commercial
Type
Views
7585
Date Added
8 January 2009
PeopleBook is a nice directory component; that is, it allows you and specify a list of contacts, organized in one or more categories; to specify a serie of fields for each contact (you can add custom fields also); to search contacts, to order them, to mask their e-mail and display a contact form instead, and so on.
As I said, component was developed by Nicholas Moyroud; it was subject to a number of attacks, mainly due to improper input validation. My work was just using Joomla! framework to sanitize CVE-2006-4195 vulnerability, and adding input validation trough a custom function using several known PHP functions such as settype(), htmlspecialchars() and mysql_escape_string().
Component is now in production. As usual, any feedback is welcome.
bybaijianpeng on January 9, 2009
Thanks to Paolo De Nictolis for your security patch.
I would like to see more template for this component. Such as, in the main page, show people photo thumbnails in the same line with their names.
Thank you.
I would like to see more template for this component. Such as, in the main page, show people photo thumbnails in the same line with their names.
Thank you.





