I tried to upload the file here in this post, but it is to big :(
Printable View
I tried to upload the file here in this post, but it is to big :(
Hello ScriptJunkie,
THank you very much. PM has been sent.
Found by Google - Flag Icons - famfamfam.com/lab/icons/flags/
When a customer was adding an item to cart, and entered a message in a text box they got this error
1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'll miss seeing you at firepot. Love, Wally & Di";}}}',
cart_total = '32', ' at line 1
in:
[UPDATE supertracker SET last_click = NOW(), exit_page='/', exit_page_name='Home', num_clicks=num_clicks+1, added_cart='true', categories_viewed='a:1:{i:1;i:1;}', products_viewed='*5?', customer_id='0', completed_purchase='false', cart_contents='a:1:{s:34:"5:8a3aabda91bb03ac02bdd7c92b2f9bdf";a:3:{s:3:"qty";d:1 ;s:10:"attributes";a:3:{i:3;i:2;i:7;s:1:"0";i:1;s:1:"0";}s:17:"attributes_values ";a:2:{i:7;s:71:"2";i:1;s:74:"Merry Christmas. We'll miss seeing you at firepot. Love, Wally & Di";}}}', cart_total = '32', order_id = '0' WHERE tracking_id='41896']
As I said in your other thread, that looks like an unsanitized database insert, which could lead to sql injection, which is very bad.
Does anyone know if this mod will be updated for the newest version of Zen Cart 1.5?