[ktmtalk]

Originally Posted by Chuck S

I would need the full errors. Your first is not showing an error of the query

I really need the full context of these errors.

I mean shipping does not have a / in it anywhere so thats why I need to know more info.

You should be able to test it with your own system.... select "place an ad" and put Buyer's Expense in the shipping and it should bomb out immediately

Entering Buyer's Expense in shipping...
In uploadproduct.php,

$wasuploaded = "no";
$testname = $_FILES['theimage']['name'][0];
$realsize = $_FILES['theimage']['size'][0];

$price = str_replace("$", "", $price);
$price = ereg_replace( "[^0-9\.]", "", $price );

echo "shipping1=$shipping<br>"; // retruns Buyer's Expense
$shipping = str_replace("$", "", $shipping);
echo "shipping2=$shipping<br>"; // returns Buyers' Expense
$shipping = ereg_replace( "[^0-9\.]", "", $shipping );
echo "shipping3=$shipping<br>"; // returns /

$reserve = str_replace("$", "", $reserve);
$reserve = ereg_replace( "[^0-9\.]", "", $reserve );
$category = (int)$category;
$quantity = (int)$quantity;

It's acting like magic quotes are on, but they are not.

But since you asked for it.... here is the full error message:

We're sorry, but the system experienced an unrecoverable error. Please try again later.

Script:

Query: UPDATE cp_products SET enddate=1258665922,price='100',shipping='\',extra1='',extra2='',extra3='',extra4='',extra5='',extra6='',currency='USD',buyit='no',rating='Excellent',zipcode='',adoptions=0,isauction=0,duration=15,reserve='',quantity='1' WHERE id=172

Result: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'USD',buyit='no',rating='Excellent',zipcode='',adoptions=0,isauct

Database handle: Resource id #5

.