FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » 1.1.1 - SQL data not escaped [when magic quotes turned off]
Show: Today's Messages :: Unread Messages :: Polls :: Message Navigator
| Subscribe to topic | Bookmark topic 
Switch to threaded view of this topic Create a new topic Submit Reply
1.1.1 - SQL data not escaped [when magic quotes turned off] [message #406] Mon, 11 February 2002 12:17 Go to next message
ironstorm is currently offline  ironstorm   Canada
Messages: 89
Registered: February 2002
Location: Toronto, Ontario, Canada
Karma: 0
Member
add to buddy list
ignore all messages by this user

When make a forum called GED's forum, or set the description
to include and apostray I get an error similar to the
following:

Query Failed: INSERT INTO fud_cat (name, description, allow_collapse, default_view, creation_date, view_order, hidden) VALUES('GED's Forum','','Y','OPEN','1013447434','4','N')
Reason:
From: f:/php4/!forums/htdocs/adm/admcat.php

One could require magic quotes to fix this or wrap
the SQL fields to be inserted using addslashes like
follows:

myAddSlashes($st) {
if (get_magic_quotes_gpc()==1) {
return $st;
} else {
return AddSlashes($st);
}
}
Very true, curre
Re: 1.1.1 - SQL data not escaped [when magic quotes turned off] [message #418 is a reply to message #406] Mon, 11 February 2002 15:40 Go to previous message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
add to buddy list
ignore all messages by this user
Very true, currently we assume that magic_quotes_gpc is on by default.
However, it appears we need a handler, like the one you've suggested for people who don't because magic_quotes_gpc cannot be turned on during runtime Sad(.



FUDforum Core Developer
Quick Reply
Formatting Tools:   
  Switch to threaded view of this topic Create a new topic
Previous Topic: Win2K - Fixes to install 1.1.1
Next Topic: Comments on installing FUD 1.1.1 on Win2K
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Tue Jul 16 04:55:29 EDT 2024

Total time taken to generate the page: 0.03622 seconds