2 issues...table missing and user update error

Client Joined: Dec 24, 2004 Posts: 194 Location: Michigan

while trying to chase down an issue with a user trying to update there info by clicking "Your Info" after logging in does not save changes / update the DB..no matter the theme...i logged in as them and verified this as true...however when i go in as admin from the admin panel and click "Users" i can bring up and modify his info and the table does update..he has tried to update his info with both IE and firefox and neither will save/update the table.....i turned on error reports and this is what it shows from the Dblog file...

Code:

March 22, 2008, 9:59 pm 1064 : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's, bowling and anything outdoors', user_sig='2008 KFX 450


2004 yfz 450, fmf tit' at line 1


SQL was: UPDATE nuke_users SET name='', user_email='EDITED@yahoo.com', femail='', user_website='', bio='', user_icq='', user_occ=EDITED, user_from=EDITED, user_interests='atv's, bowling and anything outdoors', user_sig='2008 KFX 450 2004 yfz 450, fmf titanium4 with mid pipe, DG race peg nerfs, durablue +4 axle, SRP steering stabilizer, tag bars, DG national bumper, irazr, powermadd, DG a-arm guards', user_aim='', user_yim=EDITED, user_msnm='', newsletter='0', user_viewemail='0', user_allow_viewonline='1', user_notify='1', user_notify_pm='1', user_popup_pm='1', user_attachsig='1', user_allowbbcode='1', user_allowhtml='1', user_allowsmile='1', user_timezone='-5', user_dateformat='D M d, Y g:i a', user_avatar='gallery/082.gif' WHERE user_id='EDITED'


 remote addr: EDITED

My second issue when i turned on dblog i found this as well

Code:

March 22, 2008, 9:59 pm 1146 : Table EDITED.nuke_mail_config' doesn't exist


SQL was: SELECT * FROM nuke_mail_config


 remote addr: EDITED

I have verified the table does not exist and i searched the rn core SQL file and i dont find it in the file,
Is this possiby from an older mail addon or just the files not getting completely re-written upon an FTP of the new rn 2.20.01 ?

registered · Posted: Sat Mar 22, 2008 9:06 pm

The second issue is not really an issue. That error will go away as soon as you click on the TegoNuke Mailer icon in the admin panel.

The first issue looks like someone forgot to add an addslashes() PHP call on the user interest field. We'll have to look into that one, thanks.

What version? Are you using RN 2.20.00 or 2.20.1? Have you added any forum mods?

Posted: Sat Mar 22, 2008 9:13 pm

Yeah, looks like a bug. There is a bunch of stuff in Your_Account that isn't getting addslash'ed. To work around your particular problem you could try this:

Find the function saveuser() in modules/Your_Account/index.php. On line 1653 (RN 2.20.1) there is this bit of code:

Code:




    $user_interests = check_html($user_interests, 'nohtml');

You could try changing that to:

Code:




    $user_interests = addslashes(check_html($user_interests, 'nohtml'));

It looks like a lot of things in there need that treatment though. At least at first glance.

Posted: Sat Mar 22, 2008 9:16 pm

2.20.1 is the version im on now ...i just upgraded this past week from a previous rn distro..think it was 2.10.01 ( had sentinal 2.5.16 as version i believe)...I also just verified that if i was logged in as user mine don't update either....

ok i'll go try that for the second issue

Posted: Sat Mar 22, 2008 9:46 pm

ok everything seems to be saving up to the point of instant messenger names....icq name does not update but the other Instant Message tables do update ....AT THIS POINT SO FAR EVERYTHING ELSE UPDATES STILL VERIFING (opps sorry bout the caps lock on)

Posted: Wed Mar 26, 2008 9:14 pm

I was wondering if the Your_Account bugs was entered into the RN bug tracker for fixing ?

registered · Posted: Thu Mar 27, 2008 6:08 am

mds, yes it has, but it is a blanked check for ALL Your Account updates to make sure they are appropriately slashed.

Posted: Thu Mar 27, 2008 7:10 pm

blanked check ???? is that like the check is in the mail ?? Very Happy

Posted: Thu Mar 27, 2008 7:17 pm

too funny! "blanket"? oh my... I need sleep...