Make WordPress Core

Opened 20 years ago

Closed 20 years ago

#3071 closed defect (bug) (worksforme)

Submit certain string with quote and chr results in HTTP 503

Reported by: remivisser Owned by:
Priority: normal Milestone:
Component: General Version:
Severity: normal Keywords: http 503 string quote chr
Cc: Focuses:

Description

LS

I think I found a bug, wordpress give me a http 503 error when I post the following string;

<pre>
chr(10)
);'
</pre>

I stumbled up this one when trying to post code as listed below and narrowed it down;


select  'EXEC sys.dbms_system.set_bool_param_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', parnam => ''timed_statistics'', bval => true);' || chr(10) ||
	'EXEC sys.dbms_system.set_int_param_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', parnam => ''max_dump_file_size'', intval  => 2147483647);' || chr(10) || chr(10) ||
	'EXEC sys.dbms_support.start_trace_in_session( sid => ' || s.sid || ', serial => ' || s.serial# || ', waits => true, binds => true);' || chr(10) ||
	'EXEC sys.dbms_support.stop_trace_in_session( sid => ' || s.sid || ', serial => ' || s.serial# || ');' || chr(10) || chr(10) ||
	'EXEC sys.dbms_system.set_sql_trace_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', sql_trace => TRUE); -- !! No waits and bind data'
        || chr(10) ||
        'EXEC sys.dbms_system.set_ev( si => ' || s.sid || ', se => ' || s.serial# || ', ev => 10046, LE => 12, nm => '''');'
        || chr(10) || chr(10) ||
        'ORADEBUG SETORAPID ' || p.pid || ' | ORADEBUG SETOSPID ' || p.spid
        || chr(10) ||
        'ORADEBUG EVENT 10046 TRACE NAME CONTEXT FOREVER, LEVEL 12' set_trace
from   v$session s
,      v$process p
where  s.paddr = p.addr(+)
and    s.sid 		like '&SID'
and    s.username 	like '&USERNAME'
and    nvl( upper( s.osuser), 'null') like '&OSUSER'
;

Change History (1)

#1 @foolswisdom
20 years ago

  • Component AdministrationGeneral
  • Milestone 2.5
  • Resolutionworksforme
  • Status newclosed

Closing WORKSFORME

ENV: WP 2.1-alpha3 (r4198)

I put the above pre tagged text in the HTML blog editor, and the post was successful.

remivisser, what version of wordpress are you running? Do you only have problems accessing that one post or can't access WP at all?

Note: See TracTickets for help on using tickets.