On Jan 30, 2008 10:05 PM, Voytek Eymont <[EMAIL PROTECTED]> wrote:
> I have a PHP/MySQL custom CMS from a little while ago;
> the original developer is no longer available,
>
> recently, I've upgraded server from RH73 MySQL 3.x
> to Centos 4.x MySQL 4.1.22
>
> now, on the new server, the user can not save any edited text that
> contains apostrophies (the existing text contains apostropies 'from
> before')
>
> could that be the MySQL collation that's the problem...?
>
> actual collation is 'utf8_general_ci', should I change it to 'latin1'
> ?(which I guess MySQL 3.x was)

I smell a SQL injection vulnerability.  You should be escaping all
your user input so that your database queries are well-formed.  At
this very moment, someone could probably corrupt or steal all your
data via some crafted SQL input.  Let me guess, you had a guy with the
last name "O'Keefe" -- and this is how it all started?
-- 
Kristian Erik Hermansen
"Know something about everything and everything about something."
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to