[mapguide][MG425][New] invalid characters in filter cause web tier to crash

Paul Spencer pspencer at dmsolutions.ca
Fri Oct 13 17:24:17 EDT 2006


You can view the artifact detail at the following URL:

    https://mapguide.osgeo.org/servlets/Scarab/id/MG425

Type
 Defect

Artifact ID
 MG425 (invalid characters in filter cause web tier to crash)

Reported by
 Paul Spencer
 pagameba (pspencer at dmsolutions.ca)

New artifact details:
---------------------------------------------------------

- Operating system set to new value
  Windows XP
- Steps to Reproduce set to new value
  In PHP, create a new MgQueryOptions object and call SetFilter with some non-ascii character like %fe decoded.
- Platform set to new value
  PC
- Defect Severity set to new value
  High
- Description set to new value
  Setting a filter on an MgQueryOptions object can cause the web tier to hang if the filter string contains invalid characters.

This happened because I was passing a filter string from a browser that looked like '<field> = "%fer%"'.

When PHP decoded the string, it decoded %fe as a character (some wierd p thing) and then SetFilter caused the process to go off into outer space.

The desired behaviour would be to generate an exception.
- Component set to new value
  Web Server Extensions
- Summary set to new value
  invalid characters in filter cause web tier to crash
- Priority set to new value
  P3
- Artifact Status set to new value
  Unconfirmed
- Artifact created
- Subcomponent set to new value
  Feature Service
- Status Explanation set to new value
  need someone to take a look at this.
- Version set to new value
  1.0.1

---------------------------------------------------------
This message was automatically generated by Project Tracker.








More information about the Mapguide_issues mailing list