authentication problem

[Alan DeKok]

helmy at bdg.jalawave.com wrote:
> I am currently using freeradius to hotspot service. i have a trouble when
> authenticate user. For username i used handphone number (example :
> +65994567), this is based on policy. When i try to login user with that
> username it was failed. I try to debug, the result is the '+' sign was
> change to HEXA mode '2B'. I dont have any idea but this. Hope anyone can
> help me...

  See "safe-characters" in sql.conf.  Certain characters are treated
as special by SQL, and escaped.  You *don't* want people logging in
with usernames like "SELECT * from ..."

  Alan DeKok.