8 messages in com.mysql.lists.eventum-usersRe: Input validation trouble
FromSent OnAttachments
Georger Araujo15 Sep 2005 09:52 
Bryan Alsdorf15 Sep 2005 10:45 
Georger Araujo16 Sep 2005 07:25 
Bryan Alsdorf20 Sep 2005 19:58 
Georger Araujo21 Sep 2005 05:23 
Georger Araujo22 Sep 2005 07:26 
Bryan Alsdorf22 Sep 2005 09:30 
Georger Araujo23 Sep 2005 06:35 
Subject:Re: Input validation trouble
From:Georger Araujo (geor@yahoo.com.br)
Date:09/22/2005 07:26:21 AM
List:com.mysql.lists.eventum-users

A new fact, and not a good one at that. Things got really messy now. Custom_Field::getListByIssue works fine when viewing custom field values in the Issue Details screen - but NOT when called from the notification scripts. The only noticeable difference is that when I'm logged on the $usr_id parameter is extracted automatically from context, whereas in notifications it is supplied to the method. I must say I'm really feeling lost. Maybe there's some 'context' information missing?

Georger

I have succesfully reproduced the problem in two Windows machines: one server box running Windows 2000 SP4 (PHP 4.3.11), and my Windows XP PRO SP2 (PHP 4.4.0) notebook. Both machines are running MySQL 4.1.11, Apache 1.3.27 and Eventum 1.6.1. As I said, the query runs fine on MySQL Query Browser, but not on class.custom_field.php, and I think it has to do with PEAR. I'll investigate this further, and give feedback when and if I find something. Thanks! Regards,

Georger

--- Bryan Alsdorf <bry@mysql.com> escreveu:

Hi,

Georger Araujo wrote:

Hi Bryan, input validation is fine now, thanks. Now

there's

a

new, related problem. When my staffers started getting notification emails on new issues, the custom fields didn't have their values displayed, only their labels, i.e. custom field names. I traced it to column icf_value not

having

its

value returned in the query started in line 414 of class.custom_field.php; all other columns show up fine. I have been working on this all morning, to no avail - and when I run the exact same query on MySQL Query Browser, icf_value shows up fine. Any thoughts on this? Regards,

I was unable to duplicate this problem.

/bryan