Mixing
MySQL not allowing the word “list” in textarea form post
I am writing a PHP form to submit data into MySQL database using textarea and has run into this strange problem: If I have the word "list" or "listed" or "listing" in the text, I will receive an error message saying "This site can't be reached" and "The connection was reset" with error message "ERR_CONNECTION_RESET."
I am using Goddady shared hosting with MySQL 5.6. Everything else seems to work fine. I've tried using bind_param and htmlspecialcharater but none worked.
The code is a simple SQL update:
$stmt = $conn->prepare(" UPDATE content SET question_text = '$text' WHERE qid = '$qid' ");
$stmt->execute();
Is the word "list" forbidden as a security measure in certain shared hosting??
php mysql textarea
edited Jan 1 at 21:28
Nick
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
|
show 10 more comments
I am writing a PHP form to submit data into MySQL database using textarea and has run into this strange problem: If I have the word "list" or "listed" or "listing" in the text, I will receive an error message saying "This site can't be reached" and "The connection was reset" with error message "ERR_CONNECTION_RESET."
I am using Goddady shared hosting with MySQL 5.6. Everything else seems to work fine. I've tried using bind_param and htmlspecialcharater but none worked.
The code is a simple SQL update:
$stmt = $conn->prepare(" UPDATE content SET question_text = '$text' WHERE qid = '$qid' ");
$stmt->execute();
Is the word "list" forbidden as a security measure in certain shared hosting??
php mysql textarea
edited Jan 1 at 21:28
Nick
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
Try using prepared statements properly:$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();
– Nick
Jan 1 at 21:30
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
1
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
1
@tychen are you usingPDO, notmysqli? Why doesbind_paramnot work?
– Nick
Jan 1 at 22:08
1
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14
|
show 10 more comments
I am writing a PHP form to submit data into MySQL database using textarea and has run into this strange problem: If I have the word "list" or "listed" or "listing" in the text, I will receive an error message saying "This site can't be reached" and "The connection was reset" with error message "ERR_CONNECTION_RESET."
I am using Goddady shared hosting with MySQL 5.6. Everything else seems to work fine. I've tried using bind_param and htmlspecialcharater but none worked.
The code is a simple SQL update:
$stmt = $conn->prepare(" UPDATE content SET question_text = '$text' WHERE qid = '$qid' ");
$stmt->execute();
Is the word "list" forbidden as a security measure in certain shared hosting??
php mysql textarea
edited Jan 1 at 21:28
Nick
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
I am writing a PHP form to submit data into MySQL database using textarea and has run into this strange problem: If I have the word "list" or "listed" or "listing" in the text, I will receive an error message saying "This site can't be reached" and "The connection was reset" with error message "ERR_CONNECTION_RESET."
I am using Goddady shared hosting with MySQL 5.6. Everything else seems to work fine. I've tried using bind_param and htmlspecialcharater but none worked.
The code is a simple SQL update:
$stmt = $conn->prepare(" UPDATE content SET question_text = '$text' WHERE qid = '$qid' ");
$stmt->execute();
Is the word "list" forbidden as a security measure in certain shared hosting??
php mysql textarea
php mysql textarea
edited Jan 1 at 21:28
Nick
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
edited Jan 1 at 21:28
Nick
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
edited Jan 1 at 21:28
Nick
35.3k132143
edited Jan 1 at 21:28
Nick
35.3k132143
edited Jan 1 at 21:28
Nick
35.3k132143
35.3k132143
asked Jan 1 at 21:26
tychentychen
9
asked Jan 1 at 21:26
tychentychen
9
asked Jan 1 at 21:26
tychentychen
9
9
Try using prepared statements properly:$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();
– Nick
Jan 1 at 21:30
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
1
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
1
@tychen are you usingPDO, notmysqli? Why doesbind_paramnot work?
– Nick
Jan 1 at 22:08
1
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14
|
show 10 more comments
Try using prepared statements properly:$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();
– Nick
Jan 1 at 21:30
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
1
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
1
@tychen are you usingPDO, notmysqli? Why doesbind_paramnot work?
– Nick
Jan 1 at 22:08
1
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14
Try using prepared statements properly:
$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();– Nick
Jan 1 at 21:30
Try using prepared statements properly:
$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();– Nick
Jan 1 at 21:30
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
1
1
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
1
1
@tychen are you using
PDO, not mysqli? Why does bind_param not work?– Nick
Jan 1 at 22:08
@tychen are you using
PDO, not mysqli? Why does bind_param not work?– Nick
Jan 1 at 22:08
1
1
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14
|
show 10 more comments
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53999060%2fmysql-not-allowing-the-word-list-in-textarea-form-post%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53999060%2fmysql-not-allowing-the-word-list-in-textarea-form-post%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Try using prepared statements properly:
$stmt = $conn->prepare(" UPDATE content SET question_text = ? WHERE qid = ? "); $stmt->bind_param('ss', $text, $qid); $stmt->execute();– Nick
Jan 1 at 21:30
The error you're getting is not because you're trying to store the word "list", "listed" or "listing". If the string is properly escaped, then there's no forbidden words. However, you should really use parameterized Prepared Statements instead of manually building your queries like that.
– Magnus Eriksson
Jan 1 at 21:31
1
@Nick Indeed, however if their "qid" is an integer (value/type), the 2nd should be an "i". The question is missing a lot of detail.
– Funk Forty Niner
Jan 1 at 21:31
1
@tychen are you using
PDO, notmysqli? Why doesbind_paramnot work?– Nick
Jan 1 at 22:08
1
@FunkFortyNiner as you say, it is indeed unclear (or off-topic for needing an MCVE).
– Nick
Jan 1 at 22:14