Go Back   vb.org Archive > vBulletin Modifications > Archive > vB.org Archives > Premium Archives > RPG Integration Hack
Register FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools
[BUG} clancp.php Details »»
[BUG} clancp.php
Version: , by animedj animedj is offline
Developer Last Online: Feb 2013 Show Printable Version Email this Page

Version: Unknown Rating:
Released: 03-14-2005 Last Update: Never Installs: 0
 
No support by the author.

so this bug when an user was trying to join a clan, he was using a single quote in the group's name field and the database was throwing an error.

find in clancp.php

PHP Code:
    $clanage = $DB_site->query_first("SELECT * FROM ".TABLE_PREFIX."rpg_clan WHERE title='$title' AND pass='$pickclan'"); 
add before that

PHP Code:
$title = mysql_real_escape_string($title);
$pickclan = mysql_real_escape_string($pickclan); 

Show Your Support

  • If you like to thanks you by the author -> Click Thanks to the Author
  • This modification may not be copied, reproduced or published elsewhere without author's permission.

Comments
  #2  
Old 03-14-2005, 12:01 PM
Revan's Avatar
Revan Revan is offline
 
Join Date: Jan 2004
Location: Norway
Posts: 1,671
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I was under the impression this was already fixed pre release.
You see my HDD has had some problems and I lost some work at least 4 times, this would then be one of those situations.
I will modify the code and upload a fix in 1h from writing this message.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 11:51 PM.


Powered by vBulletin® Version 3.9.0
Copyright ©2000 - 2017, vBulletin Solutions Inc.