RE: Possible phpBB <=2.0.11 bug or sql injection?
> It seems it has something to do with the the \'s *'s and length. I am not
sure if this is a big bug but I decided to
> try that after looking at search.php
Not sure either but I think it's quite serious as the name of the database,
among other things, is displayed.
Maybe it's good idea to alter that line so "irrelevant" information remains
hidden (at least until a better solution arrives):
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain list of matching users
(searching for: $search_author)");
}
--
Miguel Angel Rodriguez Jodar | http://www.atc.us.es
Departamento de Arquitectura y Tecnologia de Computadores
Universidad de Sevilla
Spain