|
Joined: Dec 2003
Posts: 6,562 Likes: 78
|
Joined: Dec 2003
Posts: 6,562 Likes: 78 |
I found this in the shout box by another user and tried this myself. When selecting Keyword Search Terms and using in body only you get a database error. Browser error: We encountered a problem. The reason reported was
Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php Line#: 577 SQL Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME D' at line 8 SQL Error #: 1064 Query: SELECT p.POST_ID FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID, ubbt_TOPICS t WHERE p.POST_IS_APPROVED = '1' AND t.TOPIC_STATUS <> 'M' AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32') AND p.TOPIC_ID = t.TOPIC_ID AND ( p.POST_DEFAULT_BODY LIKE '%nec%')) AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME DESC LIMIT 250 Ubb server log error: Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php - Line: 577 SELECT p.POST_ID FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID, ubbt_TOPICS t WHERE p.POST_IS_APPROVED = '1' AND t.TOPIC_STATUS <> 'M' AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32') AND p.TOPIC_ID = t.TOPIC_ID AND ( p.POST_DEFAULT_BODY LIKE '%nec%'))
AND p.POST_POSTED_TIME > '1314823080'
ORDER BY p.POST_POSTED_TIME DESC LIMIT 250 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')
AND p.POST_POSTED_TIME > '1314823080'
ORDER BY p.POST_POSTED_TIME D' at line 8 View Admin Logs View: Date IP address Operation Username Nr. Status Extra Information For fyi, In my case the search engine is set to: UBB Threads Internal Keyword search term was nec and then tried email, then seminar Settings are: Maximum Search Date Range: 15 years Minimum Searchable Word Length: 2 Maximum Results from Search: 250
Blue Man Group There is no such thing as stupid questions. Just stupid answers
|
|
|
|
Joined: Aug 2011
Posts: 12
stranger
|
stranger
Joined: Aug 2011
Posts: 12 |
So... This is security bug?
|
|
|
|
Joined: Dec 2006
Posts: 184
member
|
member
Joined: Dec 2006
Posts: 184 |
Works fine on my forum, although there's not many posts to search
|
|
|
|
Joined: Dec 2003
Posts: 6,562 Likes: 78
|
Joined: Dec 2003
Posts: 6,562 Likes: 78 |
So... This is security bug? Not a security issue just a functional issue.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
|
|
|
|
Joined: Dec 2003
Posts: 6,562 Likes: 78
|
Joined: Dec 2003
Posts: 6,562 Likes: 78 |
I don't recall hacking the dosearch.inc.php file. At least in version 7.5.6 So possibly it is a issue with the version of php or mysql.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
|
|
|
|
Joined: Dec 2003
Posts: 6,562 Likes: 78
|
Joined: Dec 2003
Posts: 6,562 Likes: 78 |
BTW, I get a database error here also. using the same method. With a search term of island.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
|
|
|
|
Joined: Feb 2007
Posts: 209
Enthusiast
|
Enthusiast
Joined: Feb 2007
Posts: 209 |
BTW, I get a database error here also. using the same method. With a search term of island. Tried here and on my board and I too get the same error on both.
-Tim
|
|
|
|
Joined: Nov 2011
Posts: 6
stranger
|
stranger
Joined: Nov 2011
Posts: 6 |
|
|
|
Bots
by Outdoorking - 04/13/2024 5:08 PM
|
|
|
|
|
|
2 members (DennyP, 1 invisible),
969
guests, and
171
robots. |
Key:
Admin,
Global Mod,
Mod
|
|
|
|