.

[gpo26]

.

Edited January 16, 2023 by gpo26

[sniko]

"delete" and "where" - both sql keywords. Most likely someone has installed something to str_replace sql keywords with null.

Try the following words;

CREATE
DROP
ALTER

 

Also, search your script.

• Check your database table forum_replies to see if the words are missing there, if they are, check the function that processes the reply (forums.php)
  

[gpo26]

.

Edited January 16, 2023 by gpo26

[sniko]

Create, drop, and alter all appear fine.

There is no forum_replies table on mine, but there is a forum_posts table. When I checked the table for the latest test post, the same two did not appear (delete and where). However, I can add "delete" and "where" to a post via MySQL.

Do you have a line number I can find? There's 906 lines in forums.php and I'm not sure what to look for.

Hmm, okay...

Do you have Skype so I can assist better?

 

• Go to your forums, and reply to a thread.
  
• Inspect the URL and check the action value.
  
• Go to your forums source, and find the 'switch & case' section, and retrieve the function name from that (from the action value found earlier).
  
• Copy that function here
  

[gpo26]

.

Edited January 16, 2023 by gpo26

[Magictallguy]

Please post up your reply() function - it'll, most likely, be something in there

[gpo26]

.

Edited January 16, 2023 by gpo26

[Djkanna]

Check global_func/globals .php too.

No doubt it'd be something like.

$_POST = array_map ( 'replaceShiz', $_POST );

[Djkanna]

And where the hell have you been, mister?

Mordor?

:eek:

[gpo26]

.

Edited January 16, 2023 by gpo26

[Djkanna]

Thanks that's exactly what it was. That saved me quite a bit of trouble.

No problem, glad you got it sorted. :)

[kiz5000]

Im having this exact same problem, which part did you remove from the global functions was it

function Clean($Var) {

if (get_magic_globals_gpc() == 1) {

$Var = stripslashes($Var);

}

$Var = mysql_real_escape_string(htmlentities($Var));

return $Var;

}