25-08-2002 09:43									#1
	Problem accessing chatroom Tired of ads?

The chatroom has never seemed to work for me. Every time, I get this error message.

Database error: Invalid SQL: SELECT room FROM chat_users WHERE username='Darkness'Edge' LIMIT 1
MySQL error: 1064 (You have an error in your SQL syntax near 'Edge' LIMIT 1' at line 1)
Session halted.

anyone know why?

	25-08-2002 11:06									#2
	Remove this text

Because you have the ' character in your name.
This stuffs up the sql command, hence the sql error.

You have 2 choices (that I can see)
a: Learn to live without the chatroom
b: Get Ming (or another moderator) to change your name to something without the ' character in it.

	25-08-2002 13:54									#3
	Remove this text

c: Get Markg to add a mysql_escape_string to the applicable place in the chatroom code.

d: Register with a username that trashes the whole forum - not escaping strings to be used in SQL statements is a very real security hole (you can patch it by different MySQL users for different things, but that can easily get confusing, and confusion is bad for security. Plus, you should keep security in mind from the beginning to the end, not just in Random Function #2345)... Then get MarkG to add mysql_escape_string into the chatroom code .

	25-08-2002 14:02									#4
	Remove this text

Hm. Seems like mysql_query will only execute one query, so it isn't a security hole after all...

	25-08-2002 14:03									#5
	Support Apolyton, buy Civilization 2

I was listing real possibilities.

	25-08-2002 14:13									#6
	Get a bigger avatar today!

try now

	28-08-2002 19:47									#7
	Support Apolyton, buy Civilization: The Boardgame

hi ,

problems

the screen just freezes after a while , ....

refresh is no good , ...

get out , clear browser history and then you can get back in , untill the next time , ....

sometimes it takes 5 min , sometimes 30 min , ...



have a nice day

	30-08-2002 06:16									#8
	Got spare money?

Different problem: Chatroom used to work fine with me, but the last two-three days (was offline for most of the week before that) I have entered, mavbe typed one message in, and the next time I try to submit a reply, the page continually refreshes for a minute before giving up an IE "connection not found" error. Restarting IE makes no difference. Once I could see replies but couldn't add any of my own. Upon restarting IE the problem I mention above started to happen.

What's up with this? It is a completely new error to me - I have once or twice in the past had a problem with the room randomly not displaying one of my messages, but that was the only problem until now.

	30-08-2002 20:06									#9
	Full PM-box? Change here!

Just to confirm my problem...

When trying to get to the chatroom, the IE screen refreshes constantly for a minute; each time before it refreshes again a host of "Action canceled" screens for IE show up on the Right hand side of the chat screen.

When (if) it finally connects, I can see the chat, but whenever I try to submit a reply, the whole screen clears and refreshes, and my response does not show, not even to others there.

It didn't do this until only a few days ago. Please can anyone tell me WTF is going on here?!?!?

	30-08-2002 22:40									#10
	Support Apolyton, buy Civilization III: Complete

quote: Originally posted by LightEning c: Get Markg to add a mysql_escape_string to the applicable place in the chatroom code.

And that is probably what he has done by using the addslashes function...

	31-08-2002 05:29									#11
	Get a bigger avatar today!

actually, i used the ereg_replace function to remove the '