Contact Form not working

**mc12345678** · 27 Oct 2020, 06:00 PM

Originally Posted by lat9

Noting that this will need to be performed via phpMyAdmin, since the v156 admin sanitization also applies to the Tools->Install SQL Patches.

Really? Even with this in admin/includes/init_includes/init_sanitize.php

Code:

$group = array('query_string' => array('sanitizerType' => 'NULL_ACTION', 'method' => 'post', 'pages' => array('sqlpatch')));

$sanitizer->addComplexSanitization($group);

which is expected to perform no sanitization on the query_string that is posted through sqlpatch? The above is from 1.5.6c and as far back as 1.5.6...

**lat9** · 27 Oct 2020, 07:57 PM

Originally Posted by mc12345678

Really? Even with this in admin/includes/init_includes/init_sanitize.php

Code:

$group = array('query_string' => array('sanitizerType' => 'NULL_ACTION', 'method' => 'post', 'pages' => array('sqlpatch')));

$sanitizer->addComplexSanitization($group);

which is expected to perform no sanitization on the query_string that is posted through sqlpatch? The above is from 1.5.6c and as far back as 1.5.6...

You're correct, @mc12345678. Too many versions! That must have been my remembering the 155 series.

**mc12345678** · 27 Oct 2020, 09:17 PM

Originally Posted by lat9

You're correct, @mc12345678. Too many versions! That must have been my remembering the 155 series.

As are you.

ZC 1.5.5 (from original to latest, meaning beyond 1.5.5f):

Code:

$group = array('configuration_value', 'configuration_key', 'search', 'query_string');

$sanitizer->addSanitizationGroup('STRICT_SANITIZE_VALUES', $group);

Oye. I don't remember that, but I think I had also implemented something locally to "bypass" it or something because of the problems it caused... And I don't think that it was eliminating strict sanitization in it's entirety...

Sorry, we digress...