2.5.0RC3 - Admin, add user [message #10469] |
Mon, 02 June 2003 17:40 |
|
Xodnizel
Messages: 73 Registered: May 2003
Karma: 0
|
Member |
|
|
With the "Add User" function, new lines aren't stripped from the email address, and possibly other fields(haven't tested). This actually affect me, when I messed up a copy and paste...
|
|
|
Re: 2.5.0RC3 - Admin, add user [message #10473 is a reply to message #10469] |
Mon, 02 June 2003 18:52 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Majority of the admin panel do the bare minimum as far as input filtering goes. The only thing it does it prevent a query failure from happening or accidental SQL injection. Anything else is a go... hence the admin control panel.
FUDforum Core Developer
|
|
|
Re: 2.5.0RC3 - Admin, add user [message #17905 is a reply to message #10473] |
Sat, 24 April 2004 19:31 |
mocara
Messages: 157 Registered: January 2004
Karma: 0
|
Senior Member |
|
|
Would this result in errors such as:
Quote: | 1064: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near ' 4357111, 1082834790)' at line 5
Query: INSERT INTO fud26_users (login, alias, passwd, name, email, time_zone, join_date, theme, users_opt, last_read) VALUES ( 'Bowes', 'Bowes', '8aadca6455bdaa80ca151e7aed07d390', 'Bowes', 'bowes(at)bowes(dot)com', 'Europe/London', 1082834790, , 4357111, 1082834790)
Server Version: 4.0.16-log
|
I think this may be a different issue, but worth checking.
fyi: names changed to protect the inoccent.
|
|
|
|
|