Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: devel 'bug' (table prefix).  (Read 8240 times)

0 Members and 1 Guest are viewing this topic.

boii

  • Coppermine regular visitor
  • **
  • Offline Offline
  • Posts: 65
devel 'bug' (table prefix).
« on: October 05, 2003, 05:01:20 am »

hey guys.

i was sifting through the cvs and looking at the devel code.
i noticed that in the upgrade.php or so there's a call to update the sql tables (sql/update.php i believe).

anyhow in that file you'll notice:
"ALTER TABLE CPG_comments"
"INSERT INTO CPG_config"

and the like.

shouldn't `CPG` be replaced with the TABLE_PREFIX from the config. i know that my install of coppermine (defualt i believe) originally installed giving the tables a 'cpg11d' prefix.

i mean, it won't do anything if it can't alter/insert the right table.

just a thought (maybe i'm wrong).

cheers.
ken
Logged

Tarique Sani

  • VIP
  • Coppermine addict
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 2712
    • http://tariquesani.net
Re: devel 'bug' (table prefix).
« Reply #1 on: October 05, 2003, 06:25:21 am »

Quote from: "boii"
just a thought (maybe i'm wrong).

Yes you are wrong
Code: [Select]
// Update table prefix
        $sql_query = preg_replace('/CPG_/', $CONFIG['TABLE_PREFIX'], $sql_query);

Line 180 in update.php
Logged
SANIsoft PHP applications for E Biz

boii

  • Coppermine regular visitor
  • **
  • Offline Offline
  • Posts: 65
Re: devel 'bug' (table prefix).
« Reply #2 on: October 05, 2003, 07:09:24 am »

Quote from: "tarique"

Yes you are wrong


well there's a first time for everything.

cheers.
ken
Logged
Pages: [1]   Go Up
 

Page created in 0.025 seconds with 20 queries.