[wp-trac] [WordPress Trac] #3071: Submit certain string with quote and chr results in HTTP 503

[WordPress Trac]

#3071: Submit certain string with quote and chr results in HTTP 503
----------------------------+-----------------------------------------------
 Reporter:  remivisser      |       Owner:  anonymous                
     Type:  defect          |      Status:  new                      
 Priority:  normal          |   Milestone:  2.5                      
Component:  Administration  |     Version:                           
 Severity:  normal          |    Keywords:  http 503 string quote chr
----------------------------+-----------------------------------------------
 LS

 I think I found a bug, wordpress give me a http 503 error when I post the
 following string;



 {{{
 <pre>
 chr(10)
 );'
 </pre>
 }}}



 I stumbled up this one when trying to post code as listed below and
 narrowed it down;


 {{{


 select  'EXEC sys.dbms_system.set_bool_param_in_session( sid => ' || s.sid
 || ', serial# => ' || s.serial# || ', parnam => ''timed_statistics'', bval
 => true);' || chr(10) ||
         'EXEC sys.dbms_system.set_int_param_in_session( sid => ' || s.sid
 || ', serial# => ' || s.serial# || ', parnam => ''max_dump_file_size'',
 intval  => 2147483647);' || chr(10) || chr(10) ||
         'EXEC sys.dbms_support.start_trace_in_session( sid => ' || s.sid
 || ', serial => ' || s.serial# || ', waits => true, binds => true);' ||
 chr(10) ||
         'EXEC sys.dbms_support.stop_trace_in_session( sid => ' || s.sid ||
 ', serial => ' || s.serial# || ');' || chr(10) || chr(10) ||
         'EXEC sys.dbms_system.set_sql_trace_in_session( sid => ' || s.sid
 || ', serial# => ' || s.serial# || ', sql_trace => TRUE); -- !! No waits
 and bind data'
         || chr(10) ||
         'EXEC sys.dbms_system.set_ev( si => ' || s.sid || ', se => ' ||
 s.serial# || ', ev => 10046, LE => 12, nm => '''');'
         || chr(10) || chr(10) ||
         'ORADEBUG SETORAPID ' || p.pid || ' | ORADEBUG SETOSPID ' ||
 p.spid
         || chr(10) ||
         'ORADEBUG EVENT 10046 TRACE NAME CONTEXT FOREVER, LEVEL 12'
 set_trace
 from   v$session s
 ,      v$process p
 where  s.paddr = p.addr(+)
 and    s.sid            like '&SID'
 and    s.username       like '&USERNAME'
 and    nvl( upper( s.osuser), 'null') like '&OSUSER'
 /
 }}}

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3071>
WordPress Trac <http://wordpress.org/>
WordPress blogging software