On my site, if you enter just a comma in the "topic title," the error "No input file specified." appears.
Any plans on fixing this?
I also tested it on this site, and the error "This topic has been closed" appeared. (So, I hit the back button and entered a real post-this one. Once I posted this post, I realized that it was marked as "resolved.")
Is this a security issue? Are the forums at risk of sql injections?
Commas work fine on other installs.
http://bbshowcase.org/forums/topic/test-title-with-a-comma-testing
There may be a plugin conflicting?
I know that it works with a comma and other text entered-it doesn't work when there's only a comma.
ah you are right
Opened a TRAC ticket on this.
http://trac.bbpress.org/ticket/785
> Is this a security issue? Are the forums at risk of sql injections?
No - or if they are, this isn't a symptom (in my opinion, as ever). bbPress just isn't prepared for this case. Cheers for reporting it.
You must log in to post.