NUKE COPS FORUM BUG - News and Content Submit BUG

Nuke Cadet Joined: Jul 17, 2005 Posts: 7

Here's the problem, I can't even post the stinking problem because I've finally narrowed the problem down to a phrase that is causing the problem.

WHEN I TRY TO POST THE PHRASE THAT IS CAUSING THE BUG HERE, THE POST BOMBS BACK TO THE INDEX.PHP PAGE!
~~~~~~~~~~~~~~~~~~~~~~~

However, I have been able to post the problem at Raven PHP Scripts.

You can see it here:

http://ravenphpscripts.com/postp65586.html#65586

And let me tell you, I've been trying for OVER AN HOUR to format a message somehow to be able to post the problem!

PLEASE take a look at the message at Raven... It describes the problem I'm having on your forum...

Site Admin Joined: Aug 17, 2003 Posts: 12403

UNION is blocked for security reasons, just fudge it

Nuke Cadet Joined: Jul 17, 2005 Posts: 7

With all due respect, what kind of an answer is that about a bug?

Just fudge it?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I post articles and content that contains the word all the time. I deal with organized labor issues. I have others posting articles to my site also and their articles just "evaporate" without any notice or warning.

Where can I find a list of the code changes so that I can code my own fix?

For that matter, I'll just code it to add an extra character in front and behind the word and have those characters formatted to match the background color through CSS so they look "invisible" but won't do an injection.

~~~~~~~~~~~~~~~~~~~~~~~~~~

If you guys don't want to fix this bug, at least point me to where the code changes are and I'll fix it myself.

I don't have 2 weeks to go digging through all of the files and figuring out every piece of coding...

Site Admin Joined: Aug 17, 2003 Posts: 12403

Look for UNI0N in mainfile.php

Nuke Cadet Joined: Jul 17, 2005 Posts: 7

Since I can't post the fix here, because of the u-n-i-o-n injection issue on the forums, I posted the code fix at ravensphpscripts.net

There is only one block of code that needs to be changed in mainfile.php

You can see the whole working solution here:

http://ravenphpscripts.com/postp65915.html#65915