Aderan Wars
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Player name searching error.

2 posters

Go down

Player name searching error. Empty Player name searching error.

Post by Alex Sat Dec 05, 2009 4:08 am

When you search for a player name, if you have anything entered in the 'Jump to page' box as well it will display an error.

i.e. You start typing the name into the jump to page box by mistake then type it into the correct player name box and click find, if you havn't deleted the value in the jump to page box it will display the error "Query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-30,30' at line 1 "

A similar thing happens if you have anything written in the search for player name box and then attempt to 'jump to page', although it doesn't display an error in this case it just doesn't work.

Not a big issue, a very small one infact, but I thought I would bring it to your attention anyway.

-Alex
Alex
Alex
Coalition Officer
Coalition Officer

ID : Whaddya wanna know this for huh?

-123
Alliance : None at the moment.
Number of posts : 1026
Location : Australia
Registration date : 2009-10-21

Back to top Go down

Player name searching error. Empty Re: Player name searching error.

Post by r1maru Mon Jan 25, 2010 6:51 pm

when i first found this error i thought an sql injection is a piece of cake

but i just checked and it seems the page value is multiplied with the limit start value (30)

sucks that we can't use something like
2'; show tables
but it's funny that negative numbers are allowed
r1maru
r1maru
Aderan Spy
Aderan Spy

Number of posts : 400
Registration date : 2009-06-29

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum