elkarte /
Elkarte
| @@ 208-209 (lines=2) @@ | ||
| 205 | $this->_query_count++; |
|
| 206 | $this->_db_replace_result = null; |
|
| 207 | ||
| 208 | if (empty($modSettings['disableQueryCheck']) && strpos($db_string, '\'') !== false && empty($db_values['security_override'])) |
|
| 209 | $this->error_backtrace('Hacking attempt...', 'Illegal character (\') used in query...', true, __FILE__, __LINE__); |
|
| 210 | ||
| 211 | if (empty($db_values['security_override']) && (!empty($db_values) || strpos($db_string, '{db_prefix}') !== false)) |
|
| 212 | { |
|
| @@ 147-148 (lines=2) @@ | ||
| 144 | // One more query.... |
|
| 145 | $this->_query_count++; |
|
| 146 | ||
| 147 | if (empty($modSettings['disableQueryCheck']) && strpos($db_string, '\'') !== false && empty($db_values['security_override'])) |
|
| 148 | $this->error_backtrace('Hacking attempt...', 'Illegal character (\') used in query...', true, __FILE__, __LINE__); |
|
| 149 | ||
| 150 | // Use "ORDER BY null" to prevent Mysql doing filesorts for Group By clauses without an Order By |
|
| 151 | if (strpos($db_string, 'GROUP BY') !== false && strpos($db_string, 'ORDER BY') === false && strpos($db_string, 'INSERT INTO') === false) |
|
