View Issue Details

IDProjectCategoryView StatusLast Update
0003359mantisbtbugtrackerpublic2008-05-08 22:06
Reporteraehlert Assigned Tograngeway  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Summary0003359: File names with appostrophies
Description

When you upload a file that has an appostrophy in the file name, the system generates an error message.

This is on the wintell platform.

If I remove the appostrophy from the file name it uploads succesfully.

TagsNo tags attached.

Relationships

has duplicate 0003441 closedgrangeway Cannot upload a file with a simple quote in its name (') 
child of 0003987 closedvboctor Mantis 0.19.0 Release 

Activities

grangeway

grangeway

2004-08-25 17:53

reporter   ~0007169

I assume this is fixed by 0.19, but if not, it'll be an sql injection issue.

thraxisp

thraxisp

2004-08-25 20:14

reporter   ~0007175

My fix for 3540 addresses this as well.

grangeway

grangeway

2004-08-26 17:31

reporter   ~0007198

Actually, Victor's old old commit deals with this:

It was an sql injection issue, long since patched.

http://cvs.sourceforge.net/viewcvs.py/mantisbt/mantisbt/core/file_api.php?r1=1.30&r2=1.31

Paul