Possible SQL injection hole in the Faceted Search.
enterring the following EXACTLY (including the ' ) should NOT display results
' and 1=1 --
This is equivalent to: SELECT * FROM sometableorother WHERE keywords = ' ' and 1=1 -- '
This will ALWAYS be TRUE in MySQL.
Fixed
0.3
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.