FUDforum: Bug Reports » 1.1.1 - SQL data not escaped [when magic quotes turned off]

Home » FUDforum Development » Bug Reports » 1.1.1 - SQL data not escaped [when magic quotes turned off]

Show: Today's Messages :: Polls :: Message Navigator

1.1.1 - SQL data not escaped [when magic quotes turned off] [message #406]

Mon, 11 February 2002 17:17

ironstorm

Messages: 89
Registered: February 2002
Location: Toronto, Ontario, Canada

Karma:

Member

When make a forum called GED's forum, or set the description
to include and apostray I get an error similar to the
following:

Query Failed: INSERT INTO fud_cat (name, description, allow_collapse, default_view, creation_date, view_order, hidden) VALUES('GED's Forum','','Y','OPEN','1013447434','4','N')
Reason:
From: f:/php4/!forums/htdocs/adm/admcat.php

One could require magic quotes to fix this or wrap
the SQL fields to be inserted using addslashes like
follows:

myAddSlashes($st) {
if (get_magic_quotes_gpc()==1) {
return $st;
} else {
return AddSlashes($st);
}
}
Very true, curre

Report message to a moderator

[Message index]

		1.1.1 - SQL data not escaped [when magic quotes turned off] By: ironstorm on Mon, 11 February 2002 17:17
		Re: 1.1.1 - SQL data not escaped [when magic quotes turned off] By: Ilia on Mon, 11 February 2002 20:40

Previous Topic:	Win2K - Fixes to install 1.1.1
Next Topic:	Comments on installing FUD 1.1.1 on Win2K

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun Nov 24 19:08:49 GMT 2024

Total time taken to generate the page: 0.03836 seconds