My website fails to return using info for usernames with hyphens

RiversideRocks · November 28, 2020, 12:17am

Hello, recently a user of my site informed me that they could access their public profile page! Interestingly enough, every other account seems to work. The only unique part of their name is a hyphen in the middle. Doing some debugging, I found that it isn’t an issue with MySQL:

github.com

RiversideRocks/web-riverside/blob/master/index.php#L1135


$sql = "SELECT * FROM msg WHERE username=?";
$stmt = $conn->prepare($sql); 
$stmt->bind_param("s", $id);
$stmt->execute();
$result = $stmt->get_result();
$count4 = 0;
while ($row = $result->fetch_assoc()) {
    $count4 = $count4 + 1;
}
$sql = "SELECT * FROM logins WHERE username=?";
$stmt = $conn->prepare($sql); 
$stmt->bind_param("s", $id);
$stmt->execute();
$result = $stmt->get_result();
while ($row = $result->fetch_assoc()) {
    $pre_join = $row["login_time"];
    $user = htmlspecialchars($row["username"]);
}
if($user == ""){
    die(header("Location: /request-error?code=404"));

What else could it be? Is this a known issue with SQL langs and hyphens?

mishavee · November 28, 2020, 11:12am

Might be a confusion of variable names … binding the id to be compared to a username?

no_one · November 28, 2020, 1:13pm

Just a quick reference.

RiversideRocks · November 28, 2020, 1:32pm

Hello all, thanks for your responses, but after doing some investigating, it appears to be an issue with our routing package. I’m talking with the guy behind it to find a solution. Thanks!

CarlyRaeJepsenStan · November 28, 2020, 10:38pm

GG, I was about to reply with a link to escaping characters haha

system · May 27, 2021, 10:38pm

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Debugging why a mysql query failed Coding Help php , mysql	5	532	June 18, 2021
PHP 500 Internal Server Error Coding Help	3	1042	July 23, 2020
MySQL problem \| Help Coding Help	9	321	June 14, 2020
Variables are not showing up? Coding Help php	3	355	September 23, 2020
A PHP question help Coding Help php	3	660	September 28, 2020

My website fails to return using info for usernames with hyphens

Related Topics