Matthijs
Sun 21st Oct '01, 11:35am
In my upgrade to 2.0.3 I found the following bug:
upgrade1.php, line 1532:
$DB_site->query("INSERT INTO setting VALUES (NULL,6,'Illegal user names','illegalusernames','$illegalusernames','Ent er names in here that you do not want people to register. If any of the names here are included within the username, the user will told that there is an error. Separate names by spaces.','',6)");
should be:
$DB_site->query("INSERT INTO setting VALUES (NULL,6,'Illegal user names','illegalusernames','".addslashes($illegalusernames)."','Enter names in here that you do not want people to register. If any of the names here are included within the username, the user will told that there is an error. Separate names by spaces.','',6)");
Since some people (like me) have quotes disabled in usernames. This will cause a MySQL error in the upgrade.
Thought I'd share this with you for a future release...
upgrade1.php, line 1532:
$DB_site->query("INSERT INTO setting VALUES (NULL,6,'Illegal user names','illegalusernames','$illegalusernames','Ent er names in here that you do not want people to register. If any of the names here are included within the username, the user will told that there is an error. Separate names by spaces.','',6)");
should be:
$DB_site->query("INSERT INTO setting VALUES (NULL,6,'Illegal user names','illegalusernames','".addslashes($illegalusernames)."','Enter names in here that you do not want people to register. If any of the names here are included within the username, the user will told that there is an error. Separate names by spaces.','',6)");
Since some people (like me) have quotes disabled in usernames. This will cause a MySQL error in the upgrade.
Thought I'd share this with you for a future release...