PDA


View Full Version : What's that link?


wordforge.net
06-16-2004, 12:22 PM
http://www.wordforge.net/index.php?act=Post&CODE=06&f=29&t=3880&p=87560

Just got an SQL error with that link in it from an unregistered user. Question: what is this? Is it dangerous? I have a few 'questionable' elements on my board lately that might try and play h4x0r ... and the IP is a proxy.

index.php is of course the CMPS index!

Thanks!

Invalid SQL:
SELECT

thread.threadid, thread.title, thread.replycount, postusername, postuserid, thread.dateline AS postdateline, IF(views <= thread.replycount, thread.replycount+1, views) AS views, thread.lastposter, thread.lastpost, pollid
, thread.iconid AS threadiconid, iconpath AS threadiconpath
,thread.forumid, forum.title AS forumtitle
, post.pagetext AS preview

FROM thread as thread
LEFT JOIN icon USING (iconid)
LEFT JOIN forum AS forum ON (thread.forumid = forum.forumid)
LEFT JOIN post AS post ON (post.postid = thread.firstpostid)
LEFT JOIN deletionlog AS deletionlog ON (thread.threadid = deletionlog.primaryid AND type = 'thread')

WHERE open <> '10' AND thread.visible = 1 AND thread.forumid NOT IN(7,4,21,22,28,27,30,3,24,18,19,25,20,,16,17,19,20) AND thread.forumid IN (2,12,6,11,10) AND deletionlog.primaryid IS NULL
ORDER BY lastpost DESC
LIMIT 15

mysql error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '16,17,19,20) AND thread.forumid IN (2,12,6,11,10) AND deletionl

mysql error number: 1064

Date: Wednesday 16th of June 2004 05:04:53 PM
Script: http://www.wordforge.net/index.php?act=Post&CODE=06&f=29&t=3880&p=87560
Referer:
Username: Unregistered
IP Address: 12.175.0.35

Brian
06-16-2004, 12:36 PM
It does look like somebody may have been trying to view a private forum, but unsuccessfully. There really shouldn't be a way they could produce an SQL error like that though, so I'll look into it and see how it was done. Moving this to the bugs as well since that shouldn't be able to happen. If you happen to get any other strange errors like that please post them here as well.