I see the following 2 errors in error_log
[09-Sep-2009 08:01:35] PHP Warning: Unexpected character in input: ''' (ASCII=39) state=1 in /home/xxx/public_html/includes/functions_vbseo_hook.php on line 534
[09-Sep-2009 08:01:35] PHP Parse error: syntax error, unexpected $end, expecting ']' in /home/xxx/public_html/includes/functions_vbseo_hook.php on line 534
I recently upgraded to 3.3.1
Is the input of a ', single quote, a sign of SQL injection in this case? Is this a bug, should I be worried, etc?
Thanks
edit line 534 appears to be:
Code:vbseo_prepend_template('pt_issuenotebit_user', '".(($note[message] = vbseo_process_content_area($note[message])) ? "":"")."');


LinkBack URL
About LinkBacks





Reply With Quote


