Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online
2 registered (Ruben, id242), 93 Guests and 56 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 03/26/14
Posts: 1
Top Posters (30 Days)
Daryl Fawcett 55
Ruben 44
Gizmo 33
id242 22
Bert 12
Mark S 8
jorb 7
jgeoff 5
Shawn Grim 5
driv 4
Latest Photos
Uhm...
Mayan End of World
Gas Station Disco Video Shoot
Test Pictures
Audrey Kate
Topic Options
#245422 - 09/07/11 02:43 PM UBB 7.5.6 Bug- Advanced Search
Ruben Online   hyper

Registered: 12/20/03
Posts: 5362
Loc: Lutz,FL
I found this in the shout box by another user and tried this myself.
When selecting Keyword Search Terms and using in body only you get a database error.

Browser error:
Quote:
We encountered a problem. The reason reported was

Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php
Line#: 577
SQL Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME D' at line 8
SQL Error #: 1064
Query: SELECT p.POST_ID FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID, ubbt_TOPICS t WHERE p.POST_IS_APPROVED = '1' AND t.TOPIC_STATUS <> 'M' AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32') AND p.TOPIC_ID = t.TOPIC_ID AND ( p.POST_DEFAULT_BODY LIKE '%nec%')) AND p.POST_POSTED_TIME > '1314823080' ORDER BY p.POST_POSTED_TIME DESC LIMIT 250

Ubb server log error:
Quote:
Script: /home/blabla/public_html/forums/scripts/dosearch.inc.php - Line: 577
SELECT p.POST_ID
FROM ubbt_POSTS p LEFT JOIN ubbt_POSTS pp on p.POST_ID=pp.POST_ID,
ubbt_TOPICS t
WHERE p.POST_IS_APPROVED = '1'
AND t.TOPIC_STATUS <> 'M'
AND t.FORUM_ID IN ('1','2','3','4','5','6','7','8','9','10','11','13','14','15','16','17','18','19','20','21','22','23','24','25','26','27','28','29','30','31','32')
AND p.TOPIC_ID = t.TOPIC_ID
AND ( p.POST_DEFAULT_BODY LIKE '%nec%'))

AND p.POST_POSTED_TIME > '1314823080'


ORDER BY p.POST_POSTED_TIME DESC
LIMIT 250 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')

AND p.POST_POSTED_TIME > '1314823080'


ORDER BY p.POST_POSTED_TIME D' at line 8
View Admin Logs
View:
Date IP address Operation Username Nr. Status Extra Information

For fyi,
In my case the search engine is set to:
UBB Threads Internal
Keyword search term was nec and then tried email, then seminar
Settings are:
Maximum Search Date Range: 15 years
Minimum Searchable Word Length: 2
Maximum Results from Search: 250
_________________________
Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
#245434 - 09/08/11 10:54 AM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Alzea Offline
stranger
Registered: 08/16/11
Posts: 14
Loc: Indonesia
So... This is security bug?
Top
#245435 - 09/08/11 02:00 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Stephen G Offline

member
Registered: 12/12/06
Posts: 197
Loc: UK
Works fine on my forum, although there's not many posts to search

laugh
_________________________
Stephen G
Backwards & Beyond
Top
#245446 - 09/09/11 04:36 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Alzea]
Ruben Online   hyper

Registered: 12/20/03
Posts: 5362
Loc: Lutz,FL
Originally Posted By: Alzea
So... This is security bug?

Not a security issue just a functional issue.
_________________________
Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#245453 - 09/10/11 04:03 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Stephen G]
Ruben Online   hyper

Registered: 12/20/03
Posts: 5362
Loc: Lutz,FL
I don't recall hacking the dosearch.inc.php file. At least in version 7.5.6 So possibly it is a issue with the version of php or mysql.
_________________________
Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#245455 - 09/11/11 02:19 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Ruben Online   hyper

Registered: 12/20/03
Posts: 5362
Loc: Lutz,FL
BTW,
I get a database error here also. using the same method. With a search term of island.
_________________________
Blue Man Group


There is no such thing as stupid questions. Just stupid answers
Top
#246964 - 11/20/11 09:10 AM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Cuervo Offline
enthusiast
Registered: 02/09/07
Posts: 213
Loc: Sweet Home Alabama
Originally Posted By: Ruben
BTW,
I get a database error here also. using the same method. With a search term of island.


Tried here and on my board and I too get the same error on both.
_________________________
-Tim
Top
#246967 - 11/20/11 04:02 PM Re: UBB 7.5.6 Bug- Advanced Search [Re: Ruben]
Jerk Offline
stranger
Registered: 11/20/11
Posts: 6
Seems to be okay now!
Top

Moderator:  AllenAyres, Harold, Ian, Ron M 
Shout Box

Today's Birthdays
No Birthdays
Recent Topics
how can I delete all PM's in one time
by foppen123
04/18/14 09:50 AM
how can I use the Tab SQL command?
by octaviabunea
04/16/14 12:01 PM
If "Enter an image" feature is disabled
by jorb
04/14/14 07:54 PM
Adding Search Tags to threads/posts
by Shawn Grim
04/14/14 11:03 AM
ubb_js - All .js files keep getting infected with redirect
by JerseyDevil4x4
04/11/14 08:06 PM
Forum Stats
11299 Members
36 Forums
34465 Topics
185769 Posts

Max Online: 978 @ 06/24/07 10:19 PM
Random Image