PDA

View Full Version : Bug found in EE15rc 4?


Outsider
13th of July 2004 (Tue), 10:07
So I'm setting up the gallery, and I noticed that while in the Photo Editor, if you type anything with an apostrophe " ' " you get and SQL error.
I haven't tested if other fields have this response, but I thought I'd mention it.

Is this a known issue?

I used to get this problem coding in ASP. All that is required is a check for that character, and replace it with an ANSI equivalent when written to the DB.

Pekka
13th of July 2004 (Tue), 20:45
You mean "header" field? Can't reproduce this. SQL data is escaped correctly.

If you go to server info / display full PHP info, what do you have in

magic_quotes_gpc
magic_quotes_runtime

fields?

Outsider
14th of July 2004 (Wed), 08:52
Ok Pekka.
I should have been more descriptive. I just repeated the error.

In the Photo Editor, in the field "...or type in location" if you type anything with an " ' ", it gives me an SQL error.
Error:

Exhibit Engine MySQL error!
ERROR FROM QUERY get_location_id in page 'photoeditor':

------------------------------
You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near ''Adrian's'' at line 6
------------------------------

If you encounter this error with unmodified EE source code please mail this error to EE developers with version number, detailed circumstances when it happened and preferably with a database backup dump. All reports helps improving EE to your satisfaction. Thank You.


The funny thing is that, next time I go into the Photo Editor, that location I entered, will show up in the "SELECT LOCATION..." drop down menu.
I am running IIS 6, with PHP 4.3.8 with the latest MySQL.