Project

General

Profile

Actions

Defect #43807

open

Internal Server Error when posting SQL into Comment

Added by Paul B about 9 hours ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Issues
Target version:
-
Resolution:
Affected version:

Description

Hey Guys,
First of all, thanks for your awesome work.
In the last versions, I encountered a bug when inserting SQL commands into an issue comment. When doing this, TinyTDS tries to interpret the SQL command and Redmine throws an HTML 500 error. I'm not really sure if it's also a security concern, if so, you can just delete this issue and work on it in the background.

Here is a sample SQL command: (“INSERT” has a space in it for obvious reasons.)

I NSERT INTO dbo.tbl_Rolle_Backup (ID, Bezeichnung, Avatar, startPage, AvatarPic, Bereichsansicht, Supervisor)
select ID, Bezeichnung, Avatar, startPage, AvatarPic, Bereichsansicht, Supervisor from dbo.tbl_Rolle;

The Error in production.log

ActiveRecord::StatementInvalid (TinyTds::Error: Explicit value must be specified for identity column in table 'journals' either when IDENTITY_INSERT is set to ON or when a replication user is inserting into a NOT FOR REPLICATION identity column.):

Causes:
TinyTds::Error (Explicit value must be specified for identity column in table 'journals' either when IDENTITY_INSERT is set to ON or when a replication user is inserting into a NOT FOR REPLICATION identity column.)

Software Version
Redmine 6.1.1.stable
Ruby 3.3.8-p144 (2025-04-09) [x86_64-linux-gnu]
Rails 7.2.3
Database Adapter SQLServer

No data to display

Actions

Also available in: Atom PDF