Forum Search Broken Hi, Attempting to search the forums throws this fun error: QuotePhorum Database Error Sorry, a Phorum database error occurred. Please try again later! Error: Access denied for user 'ph_ipredict_user'@'%' to database 'ph_ipredict' (1044): CREATE TEMPORARY TABLE phorum_search_ft_ca58b1d6546266c5007a3c587e41d226 ( KEY (message_id) ) ENGINE=HEAP SELECT message_id FROM phorum_search WHERE MATCH (search_text) AGAINST ('+Test' IN BOOLEAN MODE) Backtrace: Function phorum_database_error called at {path to Phorum}/include/db/mysql/mysqli.php:190 ---- Function phorum_db_interact called at {path to Phorum}/include/db/mysql.php:1755 ---- Function phorum_db_search called at {path to Phorum}/search.php:236 Aside from being broken, can I suggest from a security perspective that you have error reporting turned off and provide sensible error pages. Useful to have the database username - makes password enumeration exploits a bit easier, and the traceback probably gives me the Phorum version too. /forum/read.php?13,19277,19277#msg-19277 Fri, 28 Apr 2017 21:20:50 +0000 Phorum 5.2.20 /forum/read.php?13,19277,32772#msg-32772 Re: Forum Search Broken /forum/read.php?13,19277,32772#msg-32772 admin Bug Report Tue, 20 May 2014 20:19:09 +0000 /forum/read.php?13,19277,32770#msg-32770 Re: Forum Search Broken /forum/read.php?13,19277,32770#msg-32770 Hamish Bug Report Tue, 20 May 2014 01:17:54 +0000 /forum/read.php?13,19277,32681#msg-32681 Re: Forum Search Broken /forum/read.php?13,19277,32681#msg-32681
I even reminded them again in Sept '13 - I even included the fix.

[www.ipredict.co.nz]]]> Hamish Bug Report Wed, 09 Apr 2014 07:59:48 +0000 /forum/read.php?13,19277,32677#msg-32677 Re: Forum Search Broken /forum/read.php?13,19277,32677#msg-32677 janalyst Bug Report Mon, 07 Apr 2014 05:24:06 +0000 /forum/read.php?13,19277,19277#msg-19277 Forum Search Broken /forum/read.php?13,19277,19277#msg-19277
Attempting to search the forums throws this fun error:

Quote

Phorum Database Error

Sorry, a Phorum database error occurred.
Please try again later!
Error:

Access denied for user 'ph_ipredict_user'@'%' to database 'ph_ipredict' (1044): CREATE TEMPORARY TABLE phorum_search_ft_ca58b1d6546266c5007a3c587e41d226 ( KEY (message_id) ) ENGINE=HEAP SELECT message_id FROM phorum_search WHERE MATCH (search_text) AGAINST ('+Test' IN BOOLEAN MODE)
Backtrace:

Function phorum_database_error called at
{path to Phorum}/include/db/mysql/mysqli.php:190
----
Function phorum_db_interact called at
{path to Phorum}/include/db/mysql.php:1755
----
Function phorum_db_search called at
{path to Phorum}/search.php:236

Aside from being broken, can I suggest from a security perspective that you have error reporting turned off and provide sensible error pages. Useful to have the database username - makes password enumeration exploits a bit easier, and the traceback probably gives me the Phorum version too.]]> Hamish Bug Report Sun, 11 Nov 2012 20:01:02 +0000