Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
0 registered members (), 21 guests, and 10 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
dbremer
dbremer
Minnesota
Posts: 87
Joined: January 2012
Show All Member Profiles 
Top Posters(30 Days)
Gizmo 18
Morgan 8
id242 8
JAISP 6
walter 3
Slaz 3
luket 1
Latest Photos
Some pictures for fun
test for attachment sizes
A gallery with animated GIFs
Lazy fox, drops, and a light house.
Welcome to poet
Topic Options
#245422 - 09/07/11 07:43 PM UBB 7.5.6 Bug- Advanced Search
Joined: Dec 2003
Posts: 5,726
Lutz,FL
Ruben Offline
Ruben  Offline



Joined: Dec 2003
Posts: 5,726
Lutz,FL
I found this in the shout box by another user and tried this myself.
When selecting Keyword Search Terms and using in body only you get a database error.

Browser error:
Quote:
We encountered a problem. The reason reported was

Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php
Line#: 577
SQL Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME D' at line 8
SQL Error #: 1064
Query: SELECT p.POST_ID FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID, ubbt_TOPICS t WHERE p.POST_IS_APPROVED = '1' AND t.TOPIC_STATUS <> 'M' AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32') AND p.TOPIC_ID = t.TOPIC_ID AND ( p.POST_DEFAULT_BODY LIKE '%nec%')) AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME DESC LIMIT 250

Ubb server log error:
Quote:
Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php - Line: 577
SELECT p.POST_ID
FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID,
ubbt_TOPICS t
WHERE p.POST_IS_APPROVED = '1'
AND t.TOPIC_STATUS <> 'M'
AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32')
AND p.TOPIC_ID = t.TOPIC_ID
AND ( p.POST_DEFAULT_BODY LIKE '%nec%'))

AND p.POST_POSTED_TIME > '1314823080'


ORDER BY p.POST_POSTED_TIME DESC
LIMIT 250 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')

AND p.POST_POSTED_TIME > '1314823080'


ORDER BY p.POST_POSTED_TIME D' at line 8
View Admin Logs
View:
Date IP address Operation Username Nr. Status Extra Information

For fyi,
In my case the search engine is set to:
UBB Threads Internal
Keyword search term was nec and then tried email, then seminar
Settings are:
Maximum Search Date Range: 15 years
Minimum Searchable Word Length: 2
Maximum Results from Search: 250


Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
#245434 - 09/08/11 03:54 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Joined: Aug 2011
Posts: 14
Indonesia
Alzea Offline
stranger
Alzea  Offline
stranger

Joined: Aug 2011
Posts: 14
Indonesia
So... This is security bug?

Top
#245435 - 09/08/11 07:00 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Joined: Dec 2006
Posts: 197
UK
Stephen G Offline
member
Stephen G  Offline

member

Joined: Dec 2006
Posts: 197
UK
Works fine on my forum, although there's not many posts to search

laugh

Top
#245446 - 09/09/11 09:36 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Alzea]
Joined: Dec 2003
Posts: 5,726
Lutz,FL
Ruben Offline
Ruben  Offline



Joined: Dec 2003
Posts: 5,726
Lutz,FL
Originally Posted by Alzea
So... This is security bug?

Not a security issue just a functional issue.


Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#245453 - 09/10/11 09:03 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Stephen G]
Joined: Dec 2003
Posts: 5,726
Lutz,FL
Ruben Offline
Ruben  Offline



Joined: Dec 2003
Posts: 5,726
Lutz,FL
I don't recall hacking the dosearch.inc.php file. At least in version 7.5.6 So possibly it is a issue with the version of php or mysql.


Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#245455 - 09/11/11 07:19 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Joined: Dec 2003
Posts: 5,726
Lutz,FL
Ruben Offline
Ruben  Offline



Joined: Dec 2003
Posts: 5,726
Lutz,FL
BTW,
I get a database error here also. using the same method. With a search term of island.


Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#246964 - 11/20/11 03:10 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Joined: Feb 2007
Posts: 219
127.0.0.1
Cuervo Offline
enthusiast
Cuervo  Offline
enthusiast

Joined: Feb 2007
Posts: 219
127.0.0.1
Originally Posted by Ruben
BTW,
I get a database error here also. using the same method. With a search term of island.


Tried here and on my board and I too get the same error on both.


-Tim
Top
#246967 - 11/20/11 10:02 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Joined: Nov 2011
Posts: 6
Jerk Offline
stranger
Jerk  Offline
stranger

Joined: Nov 2011
Posts: 6
Seems to be okay now!

Top

Shout Box
Today's Birthdays
No Birthdays
Recent Topics
Twitter Integration Questions
by on 06/16/16 05:12 PM
Password Storage ??
by greiffster on 06/13/16 10:45 PM
Stopforumspam submissions not working
by dbremer on 06/07/16 02:19 PM
Quick Reply Box
by JAISP on 05/28/16 03:36 PM
security breach
by Morgan on 05/26/16 07:33 AM
Forum Statistics
Forums36
Topics34,763
Posts188,461
Members11,884
Most Online978
Jun 25th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.0
(preview build 20160621)