php - Wordpress WPDB and Mysql strange behaviour -

-

i using $wpdb , following part of codes calls $wpdb->update.

this code works if it's normal email@domain.com, when if users use + sign in username, e.g. email+something@domain.com, wpdb doesn't read + sign

below variables $_get i'm putting in values readability.

$open_email = 'something+addition@gmail.com'; $open_key = '2f1e4b16a9a882bbef9b00906fc5c8f563fd70a5'; $open_time = time();  if (strlen($open_key) == 40) {     $status_update = $wpdb->update('status',              array(                 'invite_status' => 'opened',                 'open_time' => $open_time                 ),             array(                 'invite_email' => $open_email,                 'invite_token' => $open_key                 ),             array(                 '%s',                 '%d'                 ),             array(                 '%s',                 '%s'                 )                 ); }

var dump of $wpdb->last_query , $wpdb->last_error returns followings.

string(235) "update status set invite_status = 'opened', open_time = 1461103507 invite_email = 'something addition@gmail.com' , rating_invite_token = '2f1e4b16a9a882bbef9b00906fc5c8f563fd70a5'"

i notice above part in error, highlighted in bold, plus (+) sign gone , left space, causing above statement not update.

may know missing out anything?

update: asking because users of gmails use + sign categorise emails, username+anything@gmail.com still goes username@gmail.com

if there's sanitisation supposed do, miss out, please guide me well. presume $_get data should have been sanitised.

it isn't wpdb or mysql that's removing plus.

under hood, when call update that, wordpress passing data through mysqli_real_escape_string() , nothing else.

since mentioned data coming query string $_get, + being removed before query because being unescaped , + being translated space.

you can check with:

$open_email = $_get['email']; var_dump($open_email);

and see result is.

to plus back, should safe following after sanitzation , unescaping:

$open_email = str_replace(' ', '+', $open_email);

Comments

Post a Comment

Popular posts from this blog

java - nested exception is org.hibernate.exception.SQLGrammarException: could not extract ResultSet Hibernate+SpringMVC -

-
i trying fetch records database , having above error this classs appropriate getters , setters public class user { private int id; private string username; private string password; private string email; i have create database , inserted data below configuration <bean id="datasource" class="org.apache.commons.dbcp2.basicdatasource" destroy-method="close"> <property name="driverclassname" value="com.mysql.jdbc.driver"/> <property name="url" value="jdbc:mysql://localhost:3306/usersdb"/> <property name="username" value="root"/> <property name="password" value=""/> </bean> this complete stacktrace severe: servlet.service() servlet [appservlet] in context path [/spring] threw exception [request processing failed; nested exception org.hibernate.exception.sqlgrammarexception: not ...
Read more

sql - Postgresql tables exists, but getting "relation does not exist" when querying -

-
Image
i have postgresql db number of tables. if query: select column_name information_schema.columns table_name="my_table"; i list of columns returned properly. however, when query: select * "my_table"; i error: (programmingerror) relation "my_table" not exist 'select *\n "my_table"\n' {} any thoughts on why can columns, can't query table? goal able query table. you have include schema if isnt public one select * <schema>."my_table" or can change default schema show search_path; set search_path my_schema; check table schema here select * information_schema.columns for example if table on default schema public both works ok select * parroquias_region select * public.parroquias_region but sectors need specify schema select * map_update.sectores_point
Read more

asp.net mvc - breakpoint on javascript in CSHTML? -

-
i have .cshtml file has javascript tag. within script tag have few lines of javascript. first line of javascript refers property in @viewbag. other javascript lines plain script without mvc related references. observation: can place breakpoints (visual studio 2015) on each of these javascript lines. however, breakpoints has white dot in center of breakpoint symbol (red circle) except line @viewbag reference (this particular line not have white dot in center). it seems breakpoint without white dot hit during run-time. question: can explain going on here? white dot mean? why plain red breakpoint line line hitting breakpoint? the visual studio debugger expecting debug actual server-side code within .cshtml file opposed client-side javascript within it. iirc, visual studio allow debug javascript code expected in internet explorer (and possibly edge), other browsers want use either third-party tool or developer tools (f12) within browser. an easy approach take advant...
Read more