Unknown table in where clause 5.14 vb 3.5rc3

[jribz]

I am getting emailed error reports similar to the following, version 5.14 pp with vb3.5 rc3, any ideas?

An error was encountered during execution of the query:

SELECT id,user,userid,cat,storecat,storeid,date,title,description,keywords,bigimage,width,height,filesize,views,medwidth,medheight,medsize,approved,rating,extra1,extra2,extra3,extra4,extra5,extra6,disporder,ipaddress,allowprint FROM pp_photos WHERE id=clear.gif

The query returned with an errorcode of:

Unknown table 'clear' in where clause

another example . . .

An error was encountered during execution of the query:

SELECT id,user,userid,cat,storecat,date,title,description,keywords,bigimage,width,height,filesize,views,medwidth,medheight,medsize,approved,rating,allowprint,numcom,lastposter FROM pp_photos WHERE userid=external.php ORDER BY disporder,date DESC

The query returned with an errorcode of:

Unknown table 'external' in where clause

Note: Edited to remove quote tags as they appear to mess the display of the forum. Actually, it appears that the forum is not set to wrap characters after a certain number, sorry for the scrollbars.

[Chuck S]

quite interesting indeed since the query you have is in showphoto.php

Content visible to verified customers only.

Now photo is typecast as INT so it should be null if it is not an integer so I dont understand how that query can be ran.

Same thing goes for the next query in showgallery $ppuser is typecast as INT so I do not know how the external.php is being injected there

Let me do some checking and shall see if I come up with anything

[jribz]

Thanks, looking forward to the next reply. Appreciate the support.

[Chuck S]

Okay well have you modified the code in any way?

Talking with the main developer the response is the same as I have outlined. We typecast the photo and ppuser variables as INT. If they are passed as anything else they are nullified(emptied).

[jribz]

Originally Posted by omegatron

Okay well have you modified the code in any way?

Talking with the main developer the response is the same as I have outlined. We typecast the photo and ppuser variables as INT. If they are passed as anything else they are nullified(emptied).

I don't think I have modified the code in any fashion, but if you tell me what php files might be causing the error, I will upload ones from the download package to see if it resolves the issue. From your previous post I note that you are referring to showphoto.php and showgallery.php, I will reupload those let me know if there are others please.

[Chuck S]

Those are the one's

The typecast function nullifies any variable that is not as it is suppose to be so I do not understand how those non INT values are in those queries

[jribz]

I don't really follow what you mean my INT and non INT, just not familiar with that. But I have reuploaded the files and the errors are still coming via email. Any other suggestions on what to look for?

[Chuck S]

Okay the typecast function process's and makes sure a variable whether its a STRING an INT(integer)

If it is not that then the variable is null so I right now have no other suggestions since I have no idea how those queries are getting ran. The variables themselves should be nullified so let me do some testing

[Michael P]

This is a problem for users of vB3.5 RC3; in pp-inc.php at line 36, you need to change the code in bold:

Content visible to verified customers only.

This only effects the vB3.5 RC users, we'll have to update all our intgerations accordingly.

[jribz]

Originally Posted by Michael P

This is a problem for users of vB3.5 RC3; in pp-inc.php at line 36, you need to change the code in bold:

Content visible to verified customers only.

This only effects the vB3.5 RC users, we'll have to update all our intgerations accordingly.

I have made that change, will let you know if it resolves it. Thanks.

[jribz]

This fixed it, thanks!