Tagging System

Buddy_mybb_import10515

Active Member
Joined
Mar 19, 2011
Posts
893
Reacts
0
Reputation
0
Credits
0
Well, I think the tagging plugin should be revised. Two of the problems I see on the surface are that it doesn't escape apostrophes and that if someone changes their name after you tag them it will stop the page from loading.

Code: 
@"Hel'lo"

1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'lo'' at line 1
Click to expand...
 
Hmm.

Show me this

Edit: Let me tag you then change your name to
Code: 
' Limit 1 offset 0 procedure analysis()='1
 
Let me be the first to fully support this statement, @"Blitzen"
 
I support it, It's just I don't know much about the nudge system nor did I code it.

This would have to be directed to @"The Elite"
 
You must log in or register to reply here.
Menu
Log in
Register
Cookies are required to use this site. You must accept them to continue using the site. Learn more…