Changeset 28343 for extensions/ContactForm/maintain.inc.php

Timestamp:

May 4, 2014, 4:00:55 PM (10 years ago)

Author:

mistic100

Message:

fix escaping

File:

• extensions/ContactForm/maintain.inc.php (modified) (1 diff)

extensions/ContactForm/maintain.inc.php

@@ -95 +95 @@
       // save config
       $conf['ContactForm'] = serialize($new_conf);
-      conf_update_param('ContactForm', $conf['ContactForm']);
+      conf_update_param('ContactForm', pwg_db_real_escape_string($conf['ContactForm']));
     }