Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-15347

Password updater in cron generates invalid postgres SQL

    XMLWordPrintable

    Details

      Description

      SQL generated in https://github.com/phpbb/phpbb/blob/master/phpBB/phpbb/cron/task/core/update_hashes.php#L114-L116 does not follow postgres coding standards.

      Postgres needs single quotes around strings; the mentioned statement generates double quotes giving following error message:

      ERROR:  column "$H\2y$9TE61ADb5$10\mGuVQ7ixG0zjLxLuslrIOO$QfJA4iz7ouOvtdnduI5Cr" does not exist at character 45
      STATEMENT:  UPDATE phpbb_users
                         SET user_password = "$H\2y$9TE61ADb5$10\mGuVQ7ixG0zjLxLuslrIOO$QfJA4iz7ouOvtdnduI5Cr.YLV6oUNUO"
                         WHERE user_id = 56
      
      

      See discussion on german support board: https://www.phpbb.de/community/viewtopic.php?f=145&t=240166

        Attachments

          Activity

            People

            Assignee:
            Marc Marc
            Reporter:
            canonknipser Frank Jakobs [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: