Forum Search Broken

Posted by Hamish

Hamish

Forum Search Broken
November 12, 2012 09:01AM

Registered: 6 years ago
Posts: 134

Hi,

Attempting to search the forums throws this fun error:

Quote

Phorum Database Error

Sorry, a Phorum database error occurred.
Please try again later!
Error:

Access denied for user 'ph_ipredict_user'@'%' to database 'ph_ipredict' (1044): CREATE TEMPORARY TABLE phorum_search_ft_ca58b1d6546266c5007a3c587e41d226 ( KEY (message_id) ) ENGINE=HEAP SELECT message_id FROM phorum_search WHERE MATCH (search_text) AGAINST ('+Test' IN BOOLEAN MODE)
Backtrace:

Function phorum_database_error called at
{path to Phorum}/include/db/mysql/mysqli.php:190
----
Function phorum_db_interact called at
{path to Phorum}/include/db/mysql.php:1755
----
Function phorum_db_search called at
{path to Phorum}/search.php:236

Aside from being broken, can I suggest from a security perspective that you have error reporting turned off and provide sensible error pages. Useful to have the database username - makes password enumeration exploits a bit easier, and the traceback probably gives me the Phorum version too.

Edited 1 time(s). Last edit at 11/12/2012 09:01AM by Hamish.

janalyst

Re: Forum Search Broken
April 07, 2014 05:24PM

Registered: 6 years ago
Posts: 5

Still broken one and a half years later confused smiley