[phpesp-dev] [ phpesp-Bugs-783745 ] single quote breaks "add survey"

[SourceForge.net <no...@so...>]

Bugs item #783745, was opened at 2003-08-05 15:32
Message generated for change (Comment added) made by greggmc
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=783745&group_id=8956

Category: SQL
Group: v1.6.1
>Status: Closed
Resolution: None
Priority: 5
Submitted By: Stephen Lawrence (logart)
Assigned to: Nobody/Anonymous (nobody)
Summary: single quote breaks "add survey"

Initial Comment:
If I enter a single quote in either the name, title,
subtitle, etc. I get errors from the single quote being
in the insert statement.


[ Warning, error encountered. [ 1064: You have an error
in your SQL syntax. Check the manual that corresponds
to your MySQL server version for the right syntax to
use near 'asdfasdf'', email='', theme='',
thanks_page='', thank_head='', ] ]

thanks

----------------------------------------------------------------------

>Comment By: Matthew Gregg (greggmc)
Date: 2004-02-21 18:10

Message:
Logged In: YES 
user_id=14116

Cannot duplicate in current CVS.

----------------------------------------------------------------------

Comment By: Stephen Lawrence (logart)
Date: 2003-08-07 09:30

Message:
Logged In: YES 
user_id=14468

I spent some time trying to figure out why the _addslashes
call does not function properly. I just could not quite put
my finger on it. I ended up just changing the _add/_strip to
use the normal add/strip functions and that worked, but I
would like to see it fixed permanently. 

Thanks.

log

----------------------------------------------------------------------

Comment By: Matthew Gregg (greggmc)
Date: 2003-08-07 08:54

Message:
Logged In: YES 
user_id=14116

It is designed to handle magic quotes on or off.   This
looks like a bug with that handling, that we need to fix.

----------------------------------------------------------------------

Comment By: Stephen Lawrence (logart)
Date: 2003-08-06 16:19

Message:
Logged In: YES 
user_id=14468

I added a .htaccess file with:

php_flag magic_quotes_gpc On

and it is working, but I thought the program was designed to
work with or without magic quotes?

log

----------------------------------------------------------------------

Comment By: Matthew Gregg (greggmc)
Date: 2003-08-05 18:15

Message:
Logged In: YES 
user_id=14116

I can't duplicate here.  Can you turn "magic_quotes_gpc" on
and try again?  This might be a bug with magic_quote handling.

----------------------------------------------------------------------

Comment By: Stephen Lawrence (logart)
Date: 2003-08-05 18:00

Message:
Logged In: YES 
user_id=14468

1.6.1

PHP Version 4.3.0

all magic's are off:

magic_quotes_gpc	Off	
magic_quotes_runtime	Off	
magic_quotes_sybase	Off

log

----------------------------------------------------------------------

Comment By: Matthew Gregg (greggmc)
Date: 2003-08-05 17:58

Message:
Logged In: YES 
user_id=14116

What version of ESP are you using?  Are magic quotes turned
on or off in php?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=783745&group_id=8956