PDA

View Full Version : Odd Error from query


moos3
11-26-2009, 01:57 PM
I'm getting the following error from this statement

Whole query: INSERT INTO `clip`.`notes` (`id`,`title`,`content`,`unique_id`,`create_date`,`lastChangeDate`) VALUES (NULL,`ModSecurity Directives`,`ModSecurity Directives\n\nProblem:\nip hitting same url many times a sec (lets say 10)\nsearch request with injection\n\n\n\ndrop\n\nDescription: Immediately initiate a \"connection close\" action to tear down the TCP connection by sending a FIN packet.\n\nAction Group: Disruptive\n\nExample: The following example initiates an IP collection for tracking Basic Authentication attempts. If the client goes over the threshold of more than 25 attempts in 2 minutes, it will DROP subsequent connections.\n\n\n\nSecAction initcol:ip=%{REMOTE_ADDR},nolog\nSecRule ARGS:login \"!^$\" \\\n nolog,phase:1,setvar:ip.auth_attempt=+1,deprecatevar:ip.auth_attempt=20/120\nSecRule IP:AUTH_ATTEMPT \"@gt 25\" \\\n log,drop,phase:1,msg:\'Possible Brute Force Attack\"\n\n\n\n\n\nThis action is extremely useful when responding to both Brute Force and Denial of Service attacks in that, in both cases, you want to minimize both the network bandwidth and the data returned to the client. This action causes error message to appear in the log \"(9)Bad file descriptor: core_output_filter: writing data to the network\"`,`abea0a0fd5237863de90a09d7503bfbae2e10c5a`,`2009-06-04 10:24:00`,`2009-06-04 11:07:19`);

Error is this #1054 - Unknown column 'ModSecurity Directives' in 'field list'
the clip.notes table is setup like this


CREATE TABLE IF NOT EXISTS `notes` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`title` varchar(25500) NOT NULL,
`unique_id` varchar(255) NOT NULL,
`create_date` datetime NOT NULL,
`lastChangeDate` datetime NOT NULL,
`content` longtext NOT NULL,
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=4 ;


Any help on this would be great.

guelphdad
11-26-2009, 09:20 PM
The error message is because you are using back quotes instead of single/double quotes around your inserted values. Since they are in back quotes mysql is thinking of them as column names since that is what back quotes are reserved for.