Why do I receive an error in SQL when trying to find and replace javascript within a database

Question

I'm trying to run a find and replace in phpMyAdmin because stupid hackers have inserted a db in a website I designed. I'm looking for this specific string of texts that appears in 600+ different posts:

<script src='https://hotopponents.site/site.js' type='text/javascript'></script>

I keep getting this error:

ERROR: Unknown Punctuation String @ 67

This is the SQL Query find and replace is trying to run;

SELECT `post_content`, REPLACE(`post_content`, '<script src='https://hotopponents.site/site.js' type='text/javascript'></script>', ''), COUNT(*) FROM `db709131568`.`wp_posts` WHERE `post_content` LIKE '%<script src='https://hotopponents.site/site.js' type='text/javascript'></script>%' COLLATE utf8_bin GROUP BY `post_content` ORDER BY `post_content` ASC

Whats can I do besides manually edit 600+ individual strings of content?

escaping those quotes might help, '<script src=' counts as an argument thats why its giving errors. and... if I may ask, are you writing you own queries to add database items even with wordpress? — comphonia
– comphonia, Commented Sep 30, 2018 at 4:56

sticky bit · Accepted Answer · 2018-09-30 04:53:35Z

1

You need to escape the single quotes by doubling them.

SELECT `post_content`, REPLACE(`post_content`, '<script src=''https://hotopponents.site/site.js'' type=''text/javascript''></script>', ''), COUNT(*) FROM `db709131568`.`wp_posts` WHERE `post_content` LIKE '%<script src=''https://hotopponents.site/site.js'' type=''text/javascript''></script>%' COLLATE utf8_bin GROUP BY `post_content` ORDER BY `post_content` ASC

(Speaking of escapes, you might also consider using HTML escapes when displaying user entered content.)

edited Sep 30, 2018 at 4:53

answered Sep 30, 2018 at 4:47

sticky bit

37.7k12 gold badges34 silver badges46 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

comphonia · Accepted Answer · 2018-09-30 05:31:13Z

0

since you're using phpmyadmin, go to the search tab > find and replace

Enter the full <script src='https://hotopponents.site/site.js' type='text/javascript'></script> as is, select the column and check 'Use regular expression'

edited Sep 30, 2018 at 5:31

answered Sep 30, 2018 at 5:21

comphonia

5213 silver badges10 bronze badges

Collectives™ on Stack Overflow

Why do I receive an error in SQL when trying to find and replace javascript within a database

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related