#32 Simple patch for function searchAndReplace($query, $post) SQL error

[Anonymous]

In the file:

<WEBROOT>/functions/functions-admin.php

the following line must be replaced:

function searchAndReplace($query, $post)
{
global $database;

/* check how many records are in database */

• $query2 = 'select count(*) as count from ipaddresses where '. $post['field'] .' like "%'. $post['search'] .'%";';
• $query2 = 'select count(*) as count from ipaddresses where '. $post['field'] .' like "%'. $post['search'] .'%";';

The "$post['field']" needs to be enclosed, as otherwise filed with spaces or other characters cause SQL errors.

Thomas Moroder
server24.eu

[Anonymous]

The formatting is taking away the backticks/field enclosures which must be added.