{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/13180","repository_url":"https://api.github.com/repos/joomla/joomla-cms","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/13180/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/13180/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/13180/events","html_url":"https://github.com/joomla/joomla-cms/issues/13180","id":195274437,"number":13180,"title":"full mysql query appears in http status code","user":{"login":"bell2041","id":5025272,"avatar_url":"https://avatars.githubusercontent.com/u/5025272?v=3","gravatar_id":"","url":"https://api.github.com/users/bell2041","html_url":"https://github.com/bell2041","followers_url":"https://api.github.com/users/bell2041/followers","following_url":"https://api.github.com/users/bell2041/following{/other_user}","gists_url":"https://api.github.com/users/bell2041/gists{/gist_id}","starred_url":"https://api.github.com/users/bell2041/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bell2041/subscriptions","organizations_url":"https://api.github.com/users/bell2041/orgs","repos_url":"https://api.github.com/users/bell2041/repos","events_url":"https://api.github.com/users/bell2041/events{/privacy}","received_events_url":"https://api.github.com/users/bell2041/received_events","type":"User","site_admin":false},"labels":[{"id":138443932,"url":"https://api.github.com/repos/joomla/joomla-cms/labels/No%20Code%20Attached%20Yet","name":"No Code Attached Yet","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-12-13T14:56:39Z","updated_at":"2016-12-13T20:41:06Z","closed_at":null,"body":"### Steps to reproduce the issue\r\n\r\nto duplicate the error, just need to make an error in any mysql query and look up the status HTTP status code in Chrome or any other tool (https://httpstatus.io/)\r\n\r\n### Expected result\r\n\r\nThe status code should be just : Error 500\r\n\r\n\r\n\r\n### Actual result\r\n\r\nJoomla shows the entire MySQL query\r\n\r\nStatus Code:500 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?option=com_users&view=profile' at line 3 SQL=SELECT lan2guage FROM `#__m2enu` WHERE c3lient_id = 0 AND id =index.php?option=com_users&view=profile\r\n\r\n\r\n### System information (as much as possible)\r\n\r\nI just downloaded and duplicated that problem on the most recent (Joomla! 3.6.4) fresh install\r\n\r\n### Additional comments\r\n\r\nIt is very dangerous, because it can be used by the remote attacker to play with the query for the MySQL injection.\r\nThe broken query should not be visible anywhere on the site, especially with $error_reporting set to \"none\"\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/266855509","html_url":"https://github.com/joomla/joomla-cms/issues/13180#issuecomment-266855509","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/13180","id":266855509,"user":{"login":"alex-equities","id":20544918,"avatar_url":"https://avatars.githubusercontent.com/u/20544918?v=3","gravatar_id":"","url":"https://api.github.com/users/alex-equities","html_url":"https://github.com/alex-equities","followers_url":"https://api.github.com/users/alex-equities/followers","following_url":"https://api.github.com/users/alex-equities/following{/other_user}","gists_url":"https://api.github.com/users/alex-equities/gists{/gist_id}","starred_url":"https://api.github.com/users/alex-equities/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alex-equities/subscriptions","organizations_url":"https://api.github.com/users/alex-equities/orgs","repos_url":"https://api.github.com/users/alex-equities/repos","events_url":"https://api.github.com/users/alex-equities/events{/privacy}","received_events_url":"https://api.github.com/users/alex-equities/received_events","type":"User","site_admin":false},"created_at":"2016-12-13T20:41:06Z","updated_at":"2016-12-13T20:41:06Z","body":"How does one submit for pull request? I cloned the project, make a change, and then what branch do I git push it?"}}
{"actor":{"display_login":"alex-equities"}}