403 Forbidden

[bad company]

Can anyone help with this please. I’m just trying to post something and keep getting this error. I’ve tried changing browser and devices.

[Doofus]

I thinks it's to do with the first post in a thread containing certain terms used by SQL.

SELECT
INSERT
UPDATE
DELETE
TRUNCATE
ADD
CREATE
AND
FROM
WHERE
FLUSH

Try posting without the offending word.

[bad company]

Doofus said:

I thinks it's to do with the first post in a thread containing certain terms used by SQL.

SELECT
INSERT
UPDATE
DELETE
TRUNCATE
ADD
CREATE
AND
FROM
WHERE
FLUSH

Try posting without the offending word.

Thanks. I got around the problem by taking a screenshot of the text and posting it as an image. I still don’t really understand it though.

[jfdi]

Yep, looks like the SQL injection filter is a bit over sensitive. I've just had to remove the word INSERT from a reply to get it to post.

[jfdi]

Yet it just accepted that ^

[98elise]

bad company said:

Doofus said:

I thinks it's to do with the first post in a thread containing certain terms used by SQL.

SELECT
INSERT
UPDATE
DELETE
TRUNCATE
ADD
CREATE
AND
FROM
WHERE
FLUSH

Try posting without the offending word.

Thanks. I got around the problem by taking a screenshot of the text and posting it as an image. I still don’t really understand it though.

SQL code is used to manipulate data in a database.

The system it's trying to stop you injecting SQL code into the PH database (a basic hack). Unfortunately SQL code is plain English so a post can contain enough SQL code words to trigger the error.

For example if you posted "I want to create a pick up from an old car", CREATE and FROM on the same same line might get flagged as SQL code and throw the error.

[98elise]

jfdi said:

Yet it just accepted that ^

It seems a bit random.

Modifying your posts to avoid SQL seems to work, but often a similar post will not get flagged.

[bad company]

98elise said:

SQL code is used to manipulate data in a database.

The system it's trying to stop you injecting SQL code into the PH database (a basic hack). Unfortunately SQL code is plain English so a post can contain enough SQL code words to trigger the error.

For example if you posted "I want to create a pick up from an old car", CREATE and FROM on the same same line might get flagged as SQL code and throw the error.

Got it, thank you. I’d never had that happen before. This is a copy of the text that seemed to create the problem:-

Edited by bad company on Thursday 22 August 10:16

[98elise]

bad company said:

98elise said:

SQL code is used to manipulate data in a database.

The system it's trying to stop you injecting SQL code into the PH database (a basic hack). Unfortunately SQL code is plain English so a post can contain enough SQL code words to trigger the error.

For example if you posted "I want to create a pick up from an old car", CREATE and FROM on the same same line might get flagged as SQL code and throw the error.

Got it, thank you. I’d never had that happen before. This is a copy of the text that seemed to create the problem:-

Edited by bad company on Thursday 22 August 10:16

SELECT...
...and FROM are SQL code words, and in the right order for a SQL database query.

I had to split them over 2 lines to avoid the error!

[bad company]

98elise said:

SELECT...
...and FROM are SQL code words, and in the right order for a SQL database query.

I had to split them over 2 lines to avoid the error!

Thanks. That makes me a day older but just very slightly wiser.