Bug Downloaded 1.3.1 earlier today and noticed an error being triggered Invalid SQL

[OpenSightSoftware]

Database error in DragonByte SEO 1.3.1:

Invalid SQL:
SELECT tagtext AS id FROM tag WHERE tagtext REGEXP "^(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*[([uÙÚÛÜùúûüµ]|u|Æ|æ)[sŠš][eÈÉÊËèéêë]r32(&[\#\da-z]*;|[^a-z\d])*dll](&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*$" ORDER BY LENGTH(tagtext) LIMIT 1;

MySQL Error : Got error 'unmatched parentheses at offset 74' from regexp
Error Number : 1139
Request Date : Tuesday, November 11th 2014 @ 03:09:27 PM
Error Date : Tuesday, November 11th 2014 @ 03:09:27 PM
Script : FlashFXP Forums - Tags[user32-dll]/
Referrer : FlashFXP Forums - Tags[user32-dll]/
IP Address : XXXXXXX
Username : N/A
Classname : DBSEO_Database_MySQLi
MySQL Version :

 

[Fillip H.]

Are you using any custom filter characters? If so, can you please show me the contents of that setting?

 

[OpenSightSoftware]

Custom character filter box is empty

Filter Non-Latin Characters
[x] Replace Non-Latin Characters

 

[Fillip H.]

What version of MySQL are you running? I tried running that query as-is here @ DBTech and I received no DB error, and visiting the tag page yielded no error either.

 

[OpenSightSoftware]

I am using MariaDB v10.0.14 stable

The second time this was the SQL

SELECT tagtext AS id FROM tag WHERE tagtext REGEXP "^(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*[([uЩЪЫЬщъыьµ]|u|Ж|ж)[sЉљ][eИЙКЛийкл]r32](&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*$" ORDER BY LENGTH(tagtext) LIMIT 1;

I tested executing the query via phpmyadmin and it too returned the same error.

 

[Fillip H.]

I'm half tempted to say that it's the encoding that's the issue. I can execute those queries fine here @ DBTech, where we're using MariaDB v5.5.40 stable.

If we inspect the query carefully, you'll see there is no unbalanced parentheses.

Removing the bolded part:
SELECT tagtext AS id FROM tag WHERE tagtext REGEXP "^(&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*[([uЩЪЫЬщъыьµ]|u|Ж|ж)[sЉљ][eИЙКЛийкл]r32](&[\#\da-z]*;|[^a-z\d])*(&[\#\da-z]*;|[^a-z\d])*$" ORDER BY LENGTH(tagtext) LIMIT 1;
I wager would allow the query to execute successfully.

If this is the case, then the issue is the character encoding either with the MariaDB v10 configuration itself, or that PHP isn't using the correct character set when querying the DB.

 

[OpenSightSoftware]

I'm no expert in php/mysql but I did try replacing the utf-8 characters with plain latin1 characters to see if that was the case and the code still reported an error.

This online regex visualizer seems to report the same error that I am seeing
https://www.debuggex.com/r/Vn6mittiUyjU72FZ

 

[Fillip H.]

What is the character collation of your forum's database?

I've tested this extensively, and removing the UTF-8 characters does indeed make the query execute correctly.

 

[OpenSightSoftware]

it's set to utf8_general_ci