diff options
| author | swiergot <swiergot> | 2007-08-16 00:25:04 +0000 |
|---|---|---|
| committer | swiergot <swiergot> | 2007-08-16 00:25:04 +0000 |
| commit | 14df0d4b8d95f4c0240c0bd98c6ce9b74706e3ca (patch) | |
| tree | 6aa8f1250ffe26ffe980d5aa77205586a236dfb0 /web/html/pkgedit.php | |
| parent | fe84915465ac941356f50cc07925e3fd42615955 (diff) | |
| download | aurweb-14df0d4b8d95f4c0240c0bd98c6ce9b74706e3ca.tar.xz | |
- Applied a patch from Loui to fix session removal.
- Replaced all occurences of mysql_escape_string()
with mysql_real_escape_string().
Diffstat (limited to 'web/html/pkgedit.php')
| -rw-r--r-- | web/html/pkgedit.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/web/html/pkgedit.php b/web/html/pkgedit.php index bb19144..36befbb 100644 --- a/web/html/pkgedit.php +++ b/web/html/pkgedit.php @@ -73,7 +73,7 @@ if ($_REQUEST["add_Comment"]) { $q = "INSERT INTO PackageComments "; $q.= "(PackageID, UsersID, Comments, CommentTS) VALUES ("; $q.= intval($_REQUEST["ID"]).", ".uid_from_sid($_COOKIE["AURSID"]) . ", "; - $q.= "'".mysql_escape_string($_REQUEST["comment"])."', "; + $q.= "'".mysql_real_escape_string($_REQUEST["comment"])."', "; $q.= "UNIX_TIMESTAMP())"; db_query($q, $dbh); print __("Comment has been added.")."<br /> <br />\n"; |