Hello
there is a problem in the search engine. Some words are translated between user-input and storage in the database. look at the code below:
'Get rid of malicous code in the message
strInputEntry = Replace(strInputEntry, "script", "script", 1, -1, 0)
strInputEntry = Replace(strInputEntry, "SCRIPT", "SCRIPT", 1, -1, 0)
strInputEntry = Replace(strInputEntry, "Script", "Script", 1, -1, 0)
strInputEntry = Replace(strInputEntry, "script", "Script", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "object", "object", 1, -1, 0)
strInputEntry = Replace(strInputEntry, "OBJECT", "OBJECT", 1, -1, 0)
... an so on
deleteing this code will be a solution but is also a security problem.
Example: The Word 'Script" will be translated to 'Script' and saved into the database. the search engine does not take note of this modification, so the word will be not found.
Solution: Translate the serach-string before searching the database.
Topic Options
Post Options
Thanks(0)
