Invalid characters crash search

[Accensus]

I don't know what more info I could give.

[ZzZombo]

Is that a SQL injection attack possibility I wonder?

[yum13241]

DROP TABLE anyone?

Shouldn't database input sanitation be a bit more widespread?



You can always count on XKCD.


Also, quoting strings with single quotes is atrocious. Just hold SHIFT already, it's not that hard.

[wildweasel]

What kind of invalid characters are you trying to use?

[Xeotroid]

Just searching for "(test", sans quotes, causes an error.

[Graf Zahl]

PhpBB's search is totally broken anyway with its non-configurable word substitution and rejection of short words. I'm not really surprised that it chokes on some input.

[ZzZombo]

After my testing I conclude it doesn't seem to be a real vulnerability, although to be really sure an actual infosec professional should be asked. It appears that user input at the point of crash is used as https://www.postgresql.org/docs/current ... PE-TSQUERY rather than a plain string that could cause harm.

[Professor Hastig]

Do I understand the linked page correctly that this is the mostly non-functioning word substitution thing Graf was talking about which often makes forum search such a major pain in the ass?