Forum Search Broken

Posted by Hamish 
Message List Start New Topic
Hamish
Forum Search Broken
November 12, 2012 09:01AM
Hi,

Attempting to search the forums throws this fun error:

Quote

Phorum Database Error

Sorry, a Phorum database error occurred.
Please try again later!
Error:

Access denied for user 'ph_ipredict_user'@'%' to database 'ph_ipredict' (1044): CREATE TEMPORARY TABLE phorum_search_ft_ca58b1d6546266c5007a3c587e41d226 ( KEY (message_id) ) ENGINE=HEAP SELECT message_id FROM phorum_search WHERE MATCH (search_text) AGAINST ('+Test' IN BOOLEAN MODE)
Backtrace:

Function phorum_database_error called at
{path to Phorum}/include/db/mysql/mysqli.php:190
----
Function phorum_db_interact called at
{path to Phorum}/include/db/mysql.php:1755
----
Function phorum_db_search called at
{path to Phorum}/search.php:236

Aside from being broken, can I suggest from a security perspective that you have error reporting turned off and provide sensible error pages. Useful to have the database username - makes password enumeration exploits a bit easier, and the traceback probably gives me the Phorum version too.



Edited 1 time(s). Last edit at 11/12/2012 09:01AM by Hamish.
Newer Topic Older Topic
Sorry, only registered users may post in this forum.

Click here to login