MyBB Community Forums

Hi,

When there is a reported posted, I click on it, and want to mark it as checked, so I check the box, and click the button, and get this mySQL error:

mySQL error: 1064
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'0\',\'1\')' at line 1
Query: UPDATE mybb_reportedposts SET reportstatus='1' WHERE rid IN (\'0\',\'1\')

Anyone know what problem for this might be? Thanks

well that's a known bug. its already fixed in 1.1. you may upgrade ./
or follow what's below

open ./moderation.php

find

$rids = addslashes("'0','$rids'");
 

replace with

$rids = "'0','$rids'";

regards

zaher1988 Wrote:well that's a known bug. its already fixed in 1.1. you may upgrade ./
or follow what's below

open ./moderation.php

find

$rids = addslashes("'0','$rids'");
 

replace with

$rids = "'0','$rids'";

regards

The fix I posted in the original bug thread and which is fixed in 1.1 will solve the security vulnerability that zaher's fix doesn't.