Report Post Hack

Error by getting reported posts.

DEBUG MODE

SQL Error : 1054 Unknown column 'p.poster_id' in 'on clause'

SELECT f.forum_name, f.forum_id, t.topic_title, t.topic_id, p.post_id, pt.post_subject, p.post_username, u.username, u.user_id, u2.username as reportername, u2.user_id as reporter_id FROM phpbb_forums f, phpbb_topics t, phpbb_posts p, phpbb_posts_text pt LEFT JOIN phpbb_users u ON u.user_id = p.poster_id LEFT JOIN phpbb_users u2 ON u2.user_id = p.reporter_id WHERE p.reporter_id <> 0 AND f.forum_id = p.forum_id AND t.topic_id = p.topic_id AND pt.post_id = p.post_id ORDER BY p.post_id ASC

Line : 168
File : report.php

<?php
/***************************************************************************
* install_*****_mod.php
* -------------------
* begin : Saturday, Jun 27, 2002
* copyright : (C) 2002 Saerdnaer
* email : saerdnaer@web.de
* version : 1.0.0
*
***************************************************************************/

define('IN_PHPBB', true);
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);

// Start session management
$userdata = session_pagestart($user_ip, PAGE_INDEX);
init_userprefs($userdata);
// End session management

if( !$userdata['session_logged_in'] )
{
$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';
header($header_location . './' . append_sid("login.$phpEx?redirect=" . basename(__FILE__) ));
exit;
}
else if( $userdata['user_level'] != ADMIN )
{
message_die(GENERAL_MESSAGE, $lang['Not_admin']);
}

if ( isset($userdata['no_report_popup']) && isset($userdata['refresh_report_popup']) )
{
$version = '1.0.4';
}
else
{
$sql = "SHOW COLUMNS FROM " . POSTS_TABLE . " LIKE 'reporter_id'";
if ( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, 'Could not obtain posts table reporter_id informations', '', __LINE__, __FILE__, $sql);
}
if ( $db->sql_numrows($result) > 0 )
{
$version = '1.0.1'; // bis 1.0.3
}
else
{
$version = 'new';
}
}

$sql_query = "";
switch($version)
{
case 'new':
$sql_query .= "
ALTER TABLE " . POSTS_TABLE . " ADD reporter_id MEDIUMINT(8) DEFAULT '0' NOT NULL;
ALTER TABLE " . POSTS_TABLE . " ADD INDEX (reporter_id);";
case '1.0.1':
case '1.0.2':
case '1.0.3':
$sql_query .= "ALTER TABLE " . USERS_TABLE . " ADD no_report_popup TINYINT(1) DEFAULT '0' NOT NULL, ADD refresh_report_popup TINYINT(1) DEFAULT '0' NOT NULL;";
case '1.0.4':
$sql_query .= "
ALTER TABLE " . USERS_TABLE . " ADD no_report_mail TINYINT(1) DEFAULT '0' NOT NULL;
INSERT INTO " . CONFIG_TABLE . " (config_name, config_value) VALUES
('report_no_guestes', '0'),
('report_no_auth_users', ''),
('report_no_auth_groups', ''),
('report_disabled_users', ''),
('report_disabled_groups', ''),
('report_only_admin', '0'),
('report_popup_height', '250'),
('report_popup_width', '700'),
('report_popup_links_target', '2'),
('report_post_hack_version', '1.0.5')";
break;
}

$sql_array = explode(';', $sql_query);

for ( $i = 0; $i < count($sql_array); $i++ )
{
if ( trim($sql_array[$i]) != '' )
{
if ( !$db->sql_query($sql_array[$i]) )
{
$error = true;
$error_sql[] = $sql_array[$i];
$error_msg[] = $db->sql_error();
}
else
{
$one_true = true;
}
}
}

if ( $error && !$one_true )
{
$msg = 'The queries failed. Try again later or mail me the follow errors. - <br/>Die Queries konnten nicht ausgeführt werden. Versuchen sie es später noch einmal oder schicken sie mit die folgenden Fehlermeldungen.';
}
else if ( $error )
{
$msg = 'Some queries failed. Try again later or mail me the follow errors. - <br/>Einige Queries konnten nicht ausgeführt werden. Versuchen sie es später noch einmal oder schicken sie mit die folgenden Fehlermeldungen.';
}
else
{
$delete = false;
if ( !isset($HTTP_GET_VARS['do_not_del']) )
{
$delete = @unlink(__FILE__);
}
$msg = 'The hack was installed successful. ' . ( $delete ? 'This file was deleted successful.' : 'Don\'t forget to delete this file.' ) . ' - <br/>Der Hack wurde erfolgreich installiert. ' . ( $delete ? 'Diese Datei wurde erfolgreich gelöscht.' : 'Vergessen sie nicht diese Datei zu löschen.');
}

if ( $error )
{
$msg .= '<br/><br/>Error list:';
for ( $i = 0; $i < count($error_sql); $i++ )
{
$msg .= '<br />SQL Error: ' . $error_msg[$i]['code'] . ' ' . $error_msg[$i]['message'] . '<br />SQL Query: ' . $error_sql[$i] . '<br />';
}
}
message_die( ( $error ) ? GENERAL_ERROR : GENERAL_MESSAGE, $msg);
?>