Hi Everyone,

It looks like some attempts are being made to inject code via the advanced search.
Has anyone got any answers and is cre protected from this?

Thanks & Regards

Below is the error code
Query Error reported on page /advanced_search_result.php

MySQL error: 1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'where ((ipd.pages_title like '% %' or ipd.pages_menu_name like '% %' or ipd.page' at line 1



select lf.files_id, lfd.files_descriptive_name, fi.icon_large as file_icon from fdm_library_files lf left join fdm_file_icons fi on fi.icon_id = lf.files_icon, fdm_library_files_description lfd where lf.files_status = '1' and lfd.files_id = lf.files_id and lfd.language_id = '1' where ((ipd.pages_title like '% %' or ipd.pages_menu_name like '% %' or ipd.pages_meta_title like '% %' or ipd.pages_meta_keywords like '% %' or ipd.pages_meta_description like '% %') and ipd.language_id = '1'

and ip2c.pages_id = ip.pages_id

and ip.pages_id = ipd.pages_id and ip.pages_status = '1') order by lfd.files_descriptive_name

Hi,
I have same message for several days. Anyone knows what is happening ?
My version is creloaded 6.4 b2b
thank you