Possible Bug?

[PhilipMartian]

FYI:
I attempted to use the Clone button to duplicate a sample report. The script caused an error that triggered a security error on my host's system. I know this because my site was automatically locked out.
I have not tried to recreate the error (for obvious reasons).

[admin]

Philip,

Was it a big report? (a lot of fields?)

Steven

[PhilipMartian]

Not a big report.
I contacted my host and they were unable to decipher the Mod Security error they received.
They white listed that error for my site and the problem went away.
I just had the problem recur on a new report when I entered the following select statement in the Report form.
-------------
$bidder='101';
$sql="create table #datatable# select guest_number from oxionguest,oxionitem where guest_number='$bidder' ";
$temp=nuRunQuery($sql);
---------------
I called my ISP and they white flagged additional Mod Security parameters.
I think the problem may be that the security system sees the PHP/SQL code being written to the Activity table and thinks it is "dangerous SQL injection".
If this is the case, the code could be "encrypted" when written and "decrypted" when read in nuBuilder to hide the SQL syntax.
My ISP just updated their systems on March 20th and may have added some "state of the art" security.
The first-level tech I spoke with did not understand "SQL injection".

My ISP is AcornHost.com, Portland, Oregon, USA
My email: philipmartian@gmail.com

Thanks

[admin]

.