Web Wiz Forums - view_last

Print Page | Close Window

view_last_post ERROR

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=26041
Printed Date: 03 April 2026 at 9:45am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: view_last_post ERROR

Posted By: zadax
Subject: view_last_post ERROR
Date Posted: 30 July 2008 at 10:54pm

Getting Error whan trying to click on view_last_post.png (get lest post) that located in topics page.

Microsoft VBScript runtime error '800a0006'

Overflow: 'CInt'

/forum/ver13/get_last_post.asp, line 62

note : just upgraded from ver7 to 9.5.

Replies:

Posted By: MadDog
Date Posted: 31 July 2008 at 12:18am

Are you going to post every single error you got from upgrading? Its kind of obvious omething went wrong when upgrading.

Instead of making a bunch of topics, try making one post.

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: zadax
Date Posted: 31 July 2008 at 12:39am

Actully thats the only 4 erros i got :)
i Scaned all the day long to see if their is any other bugs .. nothing found ..
So instead criticize please try to help ..
(man u didnt changed also aftar 6 years)

Posted By: Scotty32
Date Posted: 31 July 2008 at 7:37pm

Actually I think maddog has a valid point.

-------------
S2H.co.uk - http://www.s2h.co.uk/wwf/" rel="nofollow - WebWiz Mods and Skins

For support on my mods + skins, please use http://www.s2h.co.uk/forum/" rel="nofollow - my forum .

Posted By: MadDog
Date Posted: 31 July 2008 at 7:41pm

Scotty32 wrote:

Actually I think maddog has a valid point.

Thank you

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: StarDust
Date Posted: 31 July 2008 at 7:45pm

Scotty32 wrote:

Actually I think maddog has a valid point.

I agree. This way its easy to get better support.

zadax can you post the url (after the ?part) because this might be a bug in the wwf scripting.

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x

Posted By: Scotty32
Date Posted: 31 July 2008 at 7:48pm

Stardust, that wouldn't be a good idea, since all 4 of his topics are related to the same issue (as Maddog stated)

Because of a failed upgrade the Last Post IDs havent been filled in, hense the Cint error.

-------------
S2H.co.uk - http://www.s2h.co.uk/wwf/" rel="nofollow - WebWiz Mods and Skins

For support on my mods + skins, please use http://www.s2h.co.uk/forum/" rel="nofollow - my forum .

Posted By: StarDust
Date Posted: 31 July 2008 at 7:50pm

Here is a workaround

Replace Line 62 of get_last_post.asp with this:

If isNumeric(Request.QueryString("TID")) then lngTopicID = CInt(Request.QueryString("TID"))

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x

Posted By: StarDust
Date Posted: 31 July 2008 at 7:51pm

Scotty32 wrote:

Stardust, that wouldn't be a good idea, since all 4 of his topics are related to the same issue (as Maddog stated)

Because of a failed upgrade the Last Post IDs havent been filled in, hense the Cint error.

Ow i missed your post Scotty32, sorry. Yes, you are right.

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x

Posted By: MadDog
Date Posted: 31 July 2008 at 8:01pm

StarDust wrote:

Here is a workaround

Replace Line 62 of get_last_post.asp with this:

If isNumeric(Request.QueryString("TID")) then lngTopicID = CInt(Request.QueryString("TID"))

DO NOT USE THIS CODE.

That opens the forum to SQL injection!!!!!!!!!

Redue the upgrade and make sure it works properly. DO NOT CHANGE FILES to make the forum work with an upgrade because your just going to mess it up and come back later and complain about being hacked Angry

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: StarDust
Date Posted: 31 July 2008 at 8:33pm

MadDog,

I didn't get you. Why this code opens the forum to SQL injection?

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x

Posted By: MadDog
Date Posted: 31 July 2008 at 8:35pm

Because it only checks for a number, so if there is no number, there is no filter to prevent SQL injection.

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: StarDust
Date Posted: 31 July 2008 at 8:37pm

Thanks MadDog. I'll keep that in mind EVERYTIME. Thanks a lot.

What if I use this?

lngTopicID = 0
If isNumeric(Request.QueryString("TID")) then lngTopicID = CInt(Request.QueryString("TID"))

Am I safe now?

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x

Posted By: MadDog
Date Posted: 31 July 2008 at 8:43pm

Just add an else statement.


If isNumeric(Request.QueryString("TID")) then 
    lngTopicID = CInt(Request.QueryString("TID"))
Else
    lngTopicID = 0
End if

I personally dont see the point in adding a check for isNumeric...


lngTopicID = CInt(Request.QueryString("TID"))

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: StarDust
Date Posted: 31 July 2008 at 9:29pm

Thanks for the tip MadDog.

I guess the point in adding a check for isNumeric is when someone manually types in the URL and puts a non-numeric value CInt will course error. I need to prevent this error.

-------------
http://board.ebizbd.net/">

Tips, mods and skins for WWF v9.x