Please note that Form2Content is no longer being developed. All files from the latest version can be found on Github.

Form2Content Forum

Questions and answers for Form2Content, a Joomla CCK.
 Subscribe via email
Recent
Categories
Tags
View Replies (4)

Resolved Form2Content Search SQL Injection Risk?

  1. Bug
  1. Pyt
    Pyt
  2. F2C Search settings
  3. Sunday, 19 April 2020
  4.  Subscribe via email
Hello,
Thanks for the great Components!

I have a small thing, a friend of me informed me: with the url from form2content-search results there is a sql injecton possible.
Have i messed up the settings or will be there soon an update?

Kind regards,
Pyt
Responses (4)
Pyt
Pyt
Accepted Answer Pending Moderation
Hello again,

it feels like it is the field "Multi-Select-List" which causes the problem right now...

Version F2C-Search: 6.7.0
Version F2C: 6.17.0
  1. more than a month ago
  2. F2C Search settings
  3. # 1
F2C webmaster
F2C webmaster
Accepted Answer Pending Moderation
Hi Rothe, you might want to be more specific as I can't guess the actual issue.
Please read the F2C documentation before asking questions! Thank you if you've done so ;)
  1. more than a month ago
  2. F2C Search settings
  3. # 2
Pyt
Pyt
Accepted Answer Pending Moderation
So, if you make a Search form with several fiels, including Multi-select-list as last, and make it a modul, search:
then you can add instead of the last = following codes:

####### REMOVED BY ADMIN #####


**** --> Replace with Name of SQL Database

With this code it is possible to check, if there is a Table with "username" in the databaes (First code will show results normal, second code should show no hits)

Kind Regards,
Pyt
  1. more than a month ago
  2. F2C Search settings
  3. # 3
F2C webmaster
F2C webmaster
Accepted Answer Pending Moderation
Hi Pyt,

Thank you for sharing. We are looking into the risk and solution.

Regards,
Patrick
Please read the F2C documentation before asking questions! Thank you if you've done so ;)
  1. more than a month ago
  2. F2C Search settings
  3. # 4
  • Page :
  • 1


There are no replies made for this post yet.
However, you are not allowed to reply to this post.
Forums:
  1. All
  2. F2C Pre-installation questions 0
  3. Form2Content Lite & Pro 0
  4. F2C installation questions 0
  5. F2C Content type settings 0
  6. F2C field types 0
  7. F2C article templating 0
  8. F2C submission form templating 0
  9. F2C & Joomla plugin integrations 0
  10. F2C Front-end / menu settings 0
  11. F2C XML import/export 0
  12. Form2Content Search extension 0
  13. F2C Search settings 0
  14. F2C Search front-end 0
  15. F2C Search filtered article lists 0
  16. Form2Content KML Feeds extension 0
  17. Form2Content Related article plugins 0
  18. Form2Content feature requests 0
  19. Licensing & downloads 0