ISFDB Bibliographic Tools / Bugs / #568 Advanced Search errors out if a URL segment is empty or invalid

#568 Advanced Search errors out if a URL segment is empty or invalid

Milestone: v1.0 (example)

Status: closed-fixed

Owner: Ahasuerus

Labels: None

Priority: 5

Updated: 2015-03-12

Created: 2015-03-12

Creator: Ahasuerus

Private: No

Advanced Search errors out if a URL segment is empty or invalid. This doesn't create a SQL injection vulnerability because the data is properly escaped, but it causes a MySQL syntax error.

Discussion

Ahasuerus - 2015-03-12

status: open --> closed-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Anonymous
  
  Add attachments
  Cancel
  You seem to have CSS turned off. Please don't fill out this field.
  
  You seem to have CSS turned off. Please don't fill out this field.

Ahasuerus - 2015-03-12

Fixed in:

edit/aa_search.py 1.25 edit/ap_search.py 1.23 edit/pa_search.py 1.24 edit/pp_search.py 1.25 edit/ta_search.py 1.25 edit/tableInfoClass.py 1.16

Installed in r2015-068 on 2015-03-11. Closing.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Anonymous
  
  Add attachments
  Cancel
  You seem to have CSS turned off. Please don't fill out this field.
  
  You seem to have CSS turned off. Please don't fill out this field.

Anonymous

Advanced Search errors out if a URL segment is empty or invalid

Group

Searches

Help

#568 Advanced Search errors out if a URL segment is empty or invalid

Discussion