1. Jean Machuron
  2. Sherlock Holmes
  3. Bug report
  4. Thursday, 29 August 2019
  5.  Subscribe via email
Hello

We have an hotspot pro install working fine but since a couple of days some people try to hack it by directly adding parameters/words to the main hotspots page.
This provokes an sql error for now but we would like to fix it before it could give access to something else ?
To explain, the main map is at https://activ-ha.com/c/ and any correct address would be https://activ-ha.com/c/#something.
however attackers try to access https://activ-ha.com/c/somethingelse which gives a 1064 sql error :
You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ') AND type_alias = 'com_hotspots.hotspot'' at line 3

Can you let me know how to solve this ?

Thanks
Jean


There are %s replies to this question. If you want to see them you need a valid subscription.
If you have a valid subscription, please login now.
Visit store now
Sorry, the discussion is currently locked. You will not be able to post a reply or a comment at the moment.

Last questions

Unable to order comment if imported
Hi Support, on CComment 6.0.9 (the same for previous release), importing commen...
0 Replies
Posted on Sunday, 09 August 2020
  • New
    • #bug, import id, order comments
    Hotspots frontend submissions form has severe prob
    I've been using hotspots maps for many years...6 or 7...and now I find that the ...
    0 Replies
    Posted on Friday, 07 August 2020
  • New
  • error after update hotspot pro
    Hi after update hotspot pro ger error on spot page Warning: count(): P...
    2 Replies
    Posted on Thursday, 06 August 2020
  • New
  • Update Matukio auf 7.0.18
    Hallo, ich versuche, Matukio von Version 7.0.17 auf Version 7.0.18 zu aktualisi...
    2 Replies
    Posted on Tuesday, 04 August 2020
  • New
  • Doppelte Buchungen im Backend aufgetaucht
    Hallo Yves, ich verwende noch Joomla 3.9.5 und Matukio 7.0.15 aktuell komm...
    3 Replies
    Posted on Tuesday, 28 July 2020