| 1 | <?php |
|---|
| 2 | // +-----------------------------------------------------------------------+ |
|---|
| 3 | // | PhpWebGallery - a PHP based picture gallery | |
|---|
| 4 | // | Copyright (C) 2002-2003 Pierrick LE GALL - pierrick@phpwebgallery.net | |
|---|
| 5 | // | Copyright (C) 2003-2007 PhpWebGallery Team - http://phpwebgallery.net | |
|---|
| 6 | // +-----------------------------------------------------------------------+ |
|---|
| 7 | // | file : $Id: 53-database.php 1900 2007-03-12 22:33:53Z rub $ |
|---|
| 8 | // | last update : $Date: 2007-03-12 22:33:53 +0000 (Mon, 12 Mar 2007) $ |
|---|
| 9 | // | last modifier : $Author: rub $ |
|---|
| 10 | // | revision : $Revision: 1900 $ |
|---|
| 11 | // +-----------------------------------------------------------------------+ |
|---|
| 12 | // | This program is free software; you can redistribute it and/or modify | |
|---|
| 13 | // | it under the terms of the GNU General Public License as published by | |
|---|
| 14 | // | the Free Software Foundation | |
|---|
| 15 | // | | |
|---|
| 16 | // | This program is distributed in the hope that it will be useful, but | |
|---|
| 17 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
|---|
| 18 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
|---|
| 19 | // | General Public License for more details. | |
|---|
| 20 | // | | |
|---|
| 21 | // | You should have received a copy of the GNU General Public License | |
|---|
| 22 | // | along with this program; if not, write to the Free Software | |
|---|
| 23 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
|---|
| 24 | // | USA. | |
|---|
| 25 | // +-----------------------------------------------------------------------+ |
|---|
| 26 | |
|---|
| 27 | if (!defined('PHPWG_ROOT_PATH')) |
|---|
| 28 | { |
|---|
| 29 | die('Hacking attempt!'); |
|---|
| 30 | } |
|---|
| 31 | |
|---|
| 32 | $upgrade_description = '#comments.content is not html escaped anymore'; |
|---|
| 33 | |
|---|
| 34 | include_once(PHPWG_ROOT_PATH.'include/constants.php'); |
|---|
| 35 | |
|---|
| 36 | |
|---|
| 37 | $replacements = array( |
|---|
| 38 | array(''', '\''), |
|---|
| 39 | array('"', '"'), |
|---|
| 40 | array('<', '<'), |
|---|
| 41 | array('>', '>'), |
|---|
| 42 | array('&', '&') // <- this must be the last one |
|---|
| 43 | ); |
|---|
| 44 | |
|---|
| 45 | foreach ($replacements as $replacement) |
|---|
| 46 | { |
|---|
| 47 | $query = ' |
|---|
| 48 | UPDATE '.COMMENTS_TABLE.' |
|---|
| 49 | SET content = REPLACE(content, "'.addslashes($replacement[0]).'", "'.addslashes($replacement[1]).'") |
|---|
| 50 | ;'; |
|---|
| 51 | pwg_query($query); |
|---|
| 52 | } |
|---|
| 53 | |
|---|
| 54 | echo |
|---|
| 55 | "\n" |
|---|
| 56 | .'"'.$upgrade_description.'"'.', ended' |
|---|
| 57 | ."\n" |
|---|
| 58 | ; |
|---|
| 59 | |
|---|
| 60 | ?> |
|---|
