The Arcive of vBulletin Modifications Site. |
|
Details »»
|
|||||||||||||||||||||||||
Ok, I have a user that has a ' in his name(Heaven's Hero).. Well, whenever he posts, forumdisplay.php cimes up with this error:
Database error in vBulletin 2.2.1: Invalid SQL: SELECT COUNT(title) AS starts FROM thread WHERE postusername='Heaven's Hero' AND open!='10' mysql error: You have an error in your SQL syntax near 's Hero' AND open!='10'' at line 1 mysql error number: 1064 This also happens when you look at the persons Profile... If anyoen could help.. and tell me what i need to do, it would be greatly appreceated... thnx in advance... -Syphin Show Your Support
|
|||||||||||||||||||||||||
About Developer
Visit Web Site
No support by the author.| Comments |
|
#3
11-29-2001, 09:11 AM
|
||||
|
||||
Its the "User has started X threads" by Tubedogg.
http://vbulletin.org/forum/showthrea...514#post201514 
|
|
#7
11-29-2001, 10:58 PM
|
||||
|
||||
|
[QUOTE]Originally posted by Syphin
Theres no hack to let you put them in there... Your allowed on any vb thats unhacked... O.o And i asked at vb.com and they said ask here.. lol oh well...  seems to be fine now.. =)-Syphin
|
|
#8
12-01-2001, 06:00 PM
|
||||
|
||||
|
It's simple...
In ANY query involving a username... you need to go addslashes($username) This lets single and double quotes, and dollar signs be read normally. JYMON... they tell you it's a hack because the standard VB has addslashes everywhere, so that problem CANNOT happen with an unhacked VB.
|
|
#9
12-01-2001, 06:03 PM
|
||||
|
||||
|
[QUOTE]Originally posted by Palmer ofShinra
It's simple... In ANY query involving a username... you need to go addslashes($username) This lets single and double quotes, and dollar signs be read normally. JYMON... they tell you it's a hack because the standard VB has addslashes everywhere, so that problem CANNOT happen with an unhacked VB.
|
 |
«
Previous Thread
|
Next Thread
»
|
|
All times are GMT. The time now is 05:27 AM.