Page 1 of 1

Usernames with single-quots makes the thread viewer break

Posted: 16 Aug 2007, 14:40
by MatsP
Jools,
Could not run clog_contribs query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'lyse Eliot'' at line 1
Seems like something goes wrong when I read http://www.planetcatfish.com/forum/view ... hp?t=20858

Presumably because the user-name has a single-quote in it, and you are not escaping the SQL statement.

--
Mats

Posted: 09 Sep 2007, 15:15
by Jools
Fixed.

Jools