"This query is not allowed!" error popup when entering search string "right" about spotweb HOT 6 CLOSED

same error for search string "as s" 'as s' or just as s

from spotweb.

You will have the same with all words below:

/* Blacklisted SQL commands */

			$notAllowedCommands = array(
			'DELETE',
			'TRUNCATE',
			'AS',
			'DROP',
			'USE',
			'SELECT',
			'SLEEP',
			'UPDATE',
			'ALTER',
			'CREATE',
			'RENAME',
			'GRANT',
			'REVOKE',
			'BETWEEN',
			'COMMIT',
			'SAVEPOINT',
			'EXISTS',
			'GROUP',
			'HAVING',
			'IN',
			'INTO',
			'INSERT',
			'ORDER',
			'BY',
			'UNION',
			'LEFT',
			'RIGHT',
			'FULL'
			);	

from spotweb.

Should have a look which words could be removed from this list, if any.

from spotweb.

@mesa57

Whats your opinion about this?

from spotweb.

There are a number of words often used in titles like:
left, right, in, into, sleep, between, as, into.
I don't think it would pose a security risk to remove them from the blacklist.

from spotweb.

Resolved.

from spotweb.