[SOLVED] UPDATE SET problem

[DC Cajun]

I know some mysql and php but not enough to fix this problem.

 

My problem is I have a vbulletin bridge that works with Elite Gaming Ladders.  This bridge takes the vbulletin users and passwords and adds them the the Elite Gaming Ladders database member table.  This problem I am having is when a user has a /,' or $ in their password salt value it will not update the member table of EGL.  It gives this error:

 

Error Exp 1:

 

 

Invalid SQL:

UPDATE members SET vbsalt = '$'Z', password = 'aedf6dd7584d11bfafeeeeee38fbbcff' WHERE name = 'Waytohigh707';

 

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Z', password = 'aedf6dd7584d11bfafeeeeee38fbbcff' WHERE name = 'Waytohigh707'' at line 1

Error Number  : 1064

Request Date  : Saturday, May 16th 2009 @ 07:11:05 PM

Error Date    : Saturday, May 16th 2009 @ 07:11:06 PM

Script        : http://mysite.com/community/login.php?a=pwd&u=17392&i=087dc87395412bafa26e4ecf7d3378ede31d8449

Referrer      : http://us.mc623.mail.yahoo.com/mc/welcome?.gx=&.rand=9r5n1fvusl69o&.gxopt=

IP Address    : 75.111.46.204

Username      : Waytohigh707

Classname    : vB_Database

MySQL Version :

 

 

Error 2:

 

 

 

Invalid SQL:

UPDATE members SET vbsalt = ''\e', password = '85ab5acc5dba99d7e6d166e6268c2dc3' WHERE name = 'DC Cajun';

 

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\e', password = '85ab5acc5dba99d7e6d166e6268c2dc3' WHERE name = 'DC Cajun'' at line 1

Error Number  : 1064

Request Date  : Saturday, May 16th 2009 @ 07:03:13 PM

Error Date    : Saturday, May 16th 2009 @ 07:03:13 PM

Script        : http://mysite.com/community/login.php?a=pwd&u=2043&i=6c4ae22b3bf1d8b3a9a4b155eba29f447bb93790

Referrer      :

IP Address    : 98.181.7.241

Username      : Unregistered

Classname    : vB_Database

MySQL Version :

 

 

The two files attached are the files used to do this.  I had to sahve the file product-iwt_eliteladderbridge to .php  to upload it but it is a xml file.

 

Can anyone help with this?

 

[attachment deleted by admin]

[trq]

You need to escape special chars. Take a look at mysql_real_escape_String.

[DC Cajun]

Thanks But like I said I do not know enough about php or mysql to fix this.

 

I would pay if someone can fix it for me.

[trq]

Thanks But like I said I do not know enough about php or mysql to fix this.

 

I would pay if someone can fix it for me.

Then you'll want to post in the freelance board. This is a help forum.