taskSavannah Administration - Tasks: task #12764, Reproducible SQL query error on...

 
 

task #12764: Reproducible SQL query error on all issue/task/bug trackers when removing sort column

Submitted by:  Josh Triplett <joshtriplett>
Submitted on:  Sun 11 Aug 2013 07:11:53 AM UTC  
 
Should Start On: Sat 10 Aug 2013 07:00:00 AM UTCShould be Finished on: Sat 10 Aug 2013 07:00:00 AM UTC
Category: SystemPriority: 7 - High
Status: NonePrivacy: Public
Percent Complete: 0%Assigned to: None
Open/Closed: OpenEffort: 0.00

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 11 Aug 2013 07:11:53 AM UTC, original submission:

The following procedure will trigger an SQL query error on all issue/task/bug tracker pages:

Open "Display Criteria", and change the query form to "Advanced". That will display the "Submitted By" column.

Click on the "Submitted By" column heading to sort by it.

Open "Display Criteria", and change the query form to "Basic". That will hide the "Submitted By" column.

You'll now get an SQL error page similar to the following:

db_query: SQL query error Unknown column 'user_submitted_by.user_name' in 'order clause' in [SELECT DISTINCT bugs.group_id,bugs.priority,bugs.privacy,bugs.status_id,bugs.submitted_by ,bugs.bug_id,bugs.summary,bugs.resolution_id,user_assigned_to.user_name AS assigned_to,bugs.date FROM bugs ,user user_assigned_to WHERE bugs.group_id='68' AND (bugs.spamscore < 5 OR submitted_by='61092') AND user_assigned_to.user_id=bugs.assigned_to ORDER BY user_submitted_by.user_name ASC LIMIT 0,50]

Josh Triplett <joshtriplett>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by joshtriplett (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup