Make WordPress Core

Opened 19 years ago

Closed 19 years ago

#3071 closed defect (bug) (worksforme)

Submit certain string with quote and chr results in HTTP 503

Reported by: remivisser's profile remivisser Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: General Keywords: http 503 string quote chr
Focuses: Cc:

Description

LS

I think I found a bug, wordpress give me a http 503 error when I post the following string;

<pre>
chr(10)
);'
</pre>

I stumbled up this one when trying to post code as listed below and narrowed it down;


select  'EXEC sys.dbms_system.set_bool_param_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', parnam => ''timed_statistics'', bval => true);' || chr(10) ||
	'EXEC sys.dbms_system.set_int_param_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', parnam => ''max_dump_file_size'', intval  => 2147483647);' || chr(10) || chr(10) ||
	'EXEC sys.dbms_support.start_trace_in_session( sid => ' || s.sid || ', serial => ' || s.serial# || ', waits => true, binds => true);' || chr(10) ||
	'EXEC sys.dbms_support.stop_trace_in_session( sid => ' || s.sid || ', serial => ' || s.serial# || ');' || chr(10) || chr(10) ||
	'EXEC sys.dbms_system.set_sql_trace_in_session( sid => ' || s.sid || ', serial# => ' || s.serial# || ', sql_trace => TRUE); -- !! No waits and bind data'
        || chr(10) ||
        'EXEC sys.dbms_system.set_ev( si => ' || s.sid || ', se => ' || s.serial# || ', ev => 10046, LE => 12, nm => '''');'
        || chr(10) || chr(10) ||
        'ORADEBUG SETORAPID ' || p.pid || ' | ORADEBUG SETOSPID ' || p.spid
        || chr(10) ||
        'ORADEBUG EVENT 10046 TRACE NAME CONTEXT FOREVER, LEVEL 12' set_trace
from   v$session s
,      v$process p
where  s.paddr = p.addr(+)
and    s.sid 		like '&SID'
and    s.username 	like '&USERNAME'
and    nvl( upper( s.osuser), 'null') like '&OSUSER'
;

Change History (1)

#1 @foolswisdom
19 years ago

  • Component changed from Administration to General
  • Milestone 2.5 deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Closing WORKSFORME

ENV: WP 2.1-alpha3 (r4198)

I put the above pre tagged text in the HTML blog editor, and the post was successful.

remivisser, what version of wordpress are you running? Do you only have problems accessing that one post or can't access WP at all?

Note: See TracTickets for help on using tickets.