Changeset 2092

Timestamp:

Sep 18, 2007, 6:41:36 PM (17 years ago)

Author:

patdenice

Message:

0000734: bug on tags edition

File:

• branches/branch-1_7/admin/tags.php (modified) (2 diffs)

branches/branch-1_7/admin/tags.php

@@ -64 +64 @@
     if (function_exists('mysql_real_escape_string'))
     {
-      $tag_name = mysql_real_escape_string($_POST['tag_name-'.$tag_id]);
+      $tag_name = mysql_real_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
     }
     else
     {
-      $tag_name = mysql_escape_string($_POST['tag_name-'.$tag_id]);
+      $tag_name = mysql_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
     }
 
@@ -149 +149 @@
 if (isset($_POST['add']) and !empty($_POST['add_tag']) and !is_adviser())
 {
-  $tag_name = $_POST['add_tag'];
+  if (function_exists('mysql_real_escape_string'))
+  {
+    $tag_name = mysql_real_escape_string(stripslashes($_POST['add_tag']));
+  }
+  else
+  {
+    $tag_name = mysql_escape_string(stripslashes($_POST['add_tag']));
+  }
 
   // does the tag already exists?