Announcement

**Skanky Burns** · August 25, 2002, 02:06

Because you have the ' character in your name.
This stuffs up the sql command, hence the sql error.

You have 2 choices (that I can see)
a: Learn to live without the chatroom
b: Get Ming (or another moderator) to change your name to something without the ' character in it.

**Ari Rahikkala** · August 25, 2002, 04:54

c: Get Markg to add a mysql_escape_string to the applicable place in the chatroom code.

d: Register with a username that trashes the whole forum - not escaping strings to be used in SQL statements is a very real security hole (you can patch it by different MySQL users for different things, but that can easily get confusing, and confusion is bad for security. Plus, you should keep security in mind from the beginning to the end, not just in Random Function #2345)... Then get MarkG to add mysql_escape_string into the chatroom code

.

**Ari Rahikkala** · August 25, 2002, 05:02

Hm. Seems like mysql_query will only execute one query, so it isn't a security hole after all...

**Skanky Burns** · August 25, 2002, 05:03

I was listing real possibilities.

**MarkG** · August 25, 2002, 05:13

try now

**Panag** · August 28, 2002, 10:47

hi ,

problems

the screen just freezes after a while , ....

refresh is no good , ...

get out , clear browser history and then you can get back in , untill the next time , ....

sometimes it takes 5 min , sometimes 30 min , ...

have a nice day

**MrWhereItsAt** · August 29, 2002, 21:16

Different problem: Chatroom used to work fine with me, but the last two-three days (was offline for most of the week before that) I have entered, mavbe typed one message in, and the next time I try to submit a reply, the page continually refreshes for a minute before giving up an IE "connection not found" error. Restarting IE makes no difference. Once I could see replies but couldn't add any of my own. Upon restarting IE the problem I mention above started to happen.

What's up with this? It is a completely new error to me - I have once or twice in the past had a problem with the room randomly not displaying one of my messages, but that was the only problem until now.

**MrWhereItsAt** · August 30, 2002, 11:06

Just to confirm my problem...

When trying to get to the chatroom, the IE screen refreshes constantly for a minute; each time before it refreshes again a host of "Action canceled" screens for IE show up on the Right hand side of the chat screen.

When (if) it finally connects, I can see the chat, but whenever I try to submit a reply, the whole screen clears and refreshes, and my response does not show, not even to others there.

It didn't do this until only a few days ago. Please can anyone tell me WTF is going on here?!?!?

**Gramphos** · August 30, 2002, 13:40

Originally posted by LightEning
c: Get Markg to add a mysql_escape_string to the applicable place in the chatroom code.

And that is probably what he has done by using the addslashes function...

**MarkG** · August 30, 2002, 20:29

actually, i used the ereg_replace function to remove the '

Announcement

Problem accessing chatroom

Problem accessing chatroom

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment