bbPress

Info

• 5 posts
• 3 voices
• Started 3 years ago by t3ch33
• Latest reply from fel64
• This topic is not resolved

Tags

• comma
• sql injections

• Posts in this topic

characters like commas in "topic title" cause errors

1. • 
   • t3ch33
   • Member

   • Posted 3 years ago #

   On my site, if you enter just a comma in the "topic title," the error "No input file specified." appears.

   Any plans on fixing this?

   I also tested it on this site, and the error "This topic has been closed" appeared. (So, I hit the back button and entered a real post-this one. Once I posted this post, I realized that it was marked as "resolved.")

   Is this a security issue? Are the forums at risk of sql injections?
2. • 
   • _ck_
   • Moderator

   • Posted 3 years ago #

   Commas work fine on other installs.

   http://bbshowcase.org/forums/topic/test-title-with-a-comma-testing

   There may be a plugin conflicting?
3. • 
   • t3ch33
   • Member

   • Posted 3 years ago #

   I know that it works with a comma and other text entered-it doesn't work when there's only a comma.
4. • 
   • _ck_
   • Moderator

   • Posted 3 years ago #

   ah you are right

   Opened a TRAC ticket on this.
   http://trac.bbpress.org/ticket/785
5. • 
   • fel64
   • Member

   • Posted 3 years ago #

   > Is this a security issue? Are the forums at risk of sql injections?

   No - or if they are, this isn't a symptom (in my opinion, as ever). bbPress just isn't prepared for this case. Cheers for reporting it.

6. You must log in to post.