View Single Post
Old November 4th, 2009, 03:12 PM   #1 (permalink)
ktmtalk
Member
Verified Customer
 
Join Date: Oct 2009
Posts: 111
Bug causing mysql errors - cause detected

I was seeing several mysql errors... 4 from one guy, and 1 from another.

Here is the error message for each one:
Quote:
The query returned with an errorcode of:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'USD',buyit='no',rating='Excellent',zipcode='56318',adoptions=0,isauction=0,durat' at line 1
If you need assistence or feel this is a 'bug'; please report it to our support forums at: Photopost Pro Bug Reports - PhotoPost Community
To turn off these emails, set $debug=0 in your config-inc.php file.
Here are examples of the sql statements:
Quote:
UPDATE cp_products SET enddate=1258595766,price='3600',shipping='\',extra1=''....

UPDATE cp_products SET enddate=1258600536,price='2300.00',shipping='\',extra1=''....

UPDATE cp_products SET enddate=1258600738,price='4200.00',shipping='\',extra1=''....

UPDATE cp_products SET price='4200',shipping='\',reserve='0.00',title=.....
Look at the shipping values.... "\"
That \ "escapes" the next character (the ending quote) and causes the mysql error.

Ok, I showed the sql statements, and the errors, and the reason. Wanna know how it actually happened??? Well, of course you do!

Even though it's supposed to be numbers only, the seller put .... At Buyer's Expense in the shipping field.

I'm guessing that the code saw the single quote and escaped it it with a "\" ... then it looks like it removed everything EXCEPT the \ ....and the end result was..... shipping="\" and that was what was trying to be saved in the sql statement.

So.... the qwik solution is..... ?????


.
ktmtalk is offline   Reply With Quote