Hi! This is a great mod and up till now I have had no problems with it, however a customer emailed me today saying she got this error when trying to login to her account:
Code:
1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 've ordered two this time, but it's enough that you send med one with files from ' at line 1
in:
[UPDATE supertracker SET last_click = NOW(), exit_page='/store/', exit_page_name='Store Home', num_clicks=num_clicks+1, added_cart='true', categories_viewed='b:0;', products_viewed='', customer_id='155', completed_purchase='false', cart_contents='a:3:{s:36:"261:0bc6a1a6704712f9030bea5259c6c1ac";a:3:{s:3:"qty";s:1:"2";s:10:"attributes";a:2:{i:33;s:2:"71";i:34;s:1:"0";}s:17:"attributes_values";a:1:{i:34;s:219:"Could you please put files from my order 03/04/2009 # 629 on the CD too? Since I owe you for a previous CD I've ordered two this time, but it's enough that you send med one with files from order 629. Hugs from Lizzie";}}s:36:"536:b23c9e0b8df647a149c40fa24d4bb1d5";a:2:{s:3:"qty";s:1:"1";s:10:"attributes";a:5:{s:8:"18_chk26";s:2:"26";s:8:"19_chk29";s:2:"29";s:8:"20_chk32";s:2:"32";s:8:"25_chk35";s:2:"35";s:8:"26_chk37";s:2:"37";}}s:36:"261:1609c6acabb1b4d95936bbd9e6310955";a:2:{s:3:"qty";s:1:"1";s:10:"attributes";a:1:{i:33;s:2:"71";}}}', cart_total = '45', order_id = '0' WHERE tracking_id='10130']
I retrieved the code and saw it for myself using the master password mod to login to her account, and I have fixed the error by deleting that line from the supertracker table in the database using the tracking id *but* I would like to prevent it happening again....seems the supertracker also recorded customer comments but didn't escape the ' and I don't know enough to either have it not record the customer comments along with the cart or escape any apostrophes lol
Any ideas?
Bookmarks