|Error message when trying to access dbase|
Need help in query - says wrong version
| 10:44 pm on Oct 18, 2011 (gmt 0)|
I have a script made with codeigniter which did work in 2009 but it seems with mySQL updates it may need some tweeking.
This is the message I get. I understand that without the files it maye be hard or impossible to know what is happening however maybe I can get a pointer or two.
The html page this is on points to...
<form action="/wap/userinfo.php" method="POST">
so not sure if this is the script where the problem may lay.
Appreciate any help. BTW The CC details are fake.
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''Mastercard;5353765423451144;02/15;10;John Doe;','10')' at line 1QUERY:::INSERT INTO ttransaction (ttype,tdate,tuser,tsubject,tsum) VALUES(2,'2011-10-19 08:34:32',,'Mastercard;5353765423451144;02/15;10;John Doe;','10')
| 8:46 am on Oct 19, 2011 (gmt 0)|
Obviously we can't see here the code that is generating the sql statement, but I think MySQL is compaining about the lack of a value for tuser - i.e. the two commas right next to each other before 'Mastercard;...'
You say the credit card details are fake but is the real application actually storing credit card details in plain text? You're opening yourself up to big big trouble if that's the case. Very bad practice.
| 4:21 pm on Oct 19, 2011 (gmt 0)|
Here's your probable problem, unless "tuser" is an integer field type:
Storing CC info is a huge liability, luck may be on your side but it always runs out sooner or later.
| 11:47 pm on Oct 19, 2011 (gmt 0)|
Thank you for the replies.
Yes we have the same CC concerns and have it on the list to have this area redone so that it addresses those issues.
First thing though is to see if we can resurrect the script or if we have to start again..
Appreciate the help guys