Menu

#136 Special character in supporting doc name leads to error

open
CryoBean
Tests (15)
4
2009-03-23
2009-03-23
sca_gs
No

If I try to upload a file containing " ' " Im getting the following error message:

User Defined Error :- mysql error: [1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '')' at line 1] in EXECUTE("INSERT INTO manualtestdocs (TestID, DisplayName) VALUES ('1055', '!§$%&()=äö#'+-.txt')")
File: /var/www/html/rth/adodb-4.65/adodb-errorhandler.inc.php
Line: 77

There should be at least a proper error message.

Better solution would be to prevent such files from being uploaded.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB