Opasnost SQL Injection v forume [ translit :( ]

xfgfm

Po linku :

Vihodit SQL Error:

Could not query users

[code:2qqf9d9j]DEBUG MODE

SQL Error : 1064 You have an error in your SQL syntax; check the manual that corresponds to your

MySQL server version for the right syntax to use near '-99, 25' at line 4

SELECT username, user_id, user_viewemail, user_posts, user_regdate, user_from, user_website,

user_email, user_icq, user_aim, user_yim, user_msnm, user_avatar, user_avatar_type,

user_allowavatar FROM phpbb_users WHERE user_id <> -1 ORDER BY username ASC LIMIT -99, 25

Line : 151
File : memberlist.php[/code:2qqf9d9j]

Postavte podhodashii patch ot phpBB ili obratitis k phpBB s prosboy na razrabotku patcha.

P.S.
Ne stavte mne ban za translit ili poisk oshibok na forume