Special character in supporting doc name leads to error
Brought to you by:
andreas_rth
If I try to upload a file containing " ' " Im getting the following error message:
User Defined Error :- mysql error: [1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '')' at line 1] in EXECUTE("INSERT INTO manualtestdocs (TestID, DisplayName) VALUES ('1055', '!§$%&()=äö#'+-.txt')")
File: /var/www/html/rth/adodb-4.65/adodb-errorhandler.inc.php
Line: 77
There should be at least a proper error message.
Better solution would be to prevent such files from being uploaded.