Member Search Error If Apostrophe In Address

1064

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's Place%' OR cb_city LIKE '%London%' OR cb_country LIKE '%England%' OR cb_pos' at line 3 SQL=SELECT * FROM w4s8u_comprofiler AS a LEFT JOIN w4s8u_users u ON u.id = a.user_id WHERE u.block<>1 AND a.user_id <> 236 AND a.approved=1 AND a.confirmed=1 AND ( cb_boroughtown LIKE '%xxxxxxxck's Place%' OR cb_city LIKE '%London%' OR cb_country LIKE '%England%' OR cb_postcode LIKE '%xxxxxxxxx%') AND user_id NOT IN (241,242,243,244,246,248,251,254,256,258,261,263,267,272,277,278,288,292,296,299,306,314,315,316,320,327,329,331,332,333,334,335,336,337,339,340,341,342,343,345,346,347,348,349) AND user_id NOT IN (260) LIMIT 5

I can't see how since the value is escaped. Are you using an advanced filter and substituting in the value maybe? Even then the substitutions are ran through an escaping function. Please better clarify exactly what you're doing.

All I did was update my admin account, making it a full account.

Then, when I went to search members, this happened.

It does identify the ' as the issue and when I remove the ' all is well!

Search members where? A userlist or backend User Management?

I set up a simple user list, in the front end

Seams to be working perfectly fine in my tests. Using the string "ju`st'a"test" causes no issues. Are you using CB 2.0.5 or CB 1.x?