Changeset 30814 for extensions/AddInfo/admin

Timestamp:

Dec 23, 2014, 9:15:02 PM (9 years ago)

Author:

ddtddt

Message:

[extensions] - Add info - update export to manage_properties_photos error case with linux

File:

• extensions/AddInfo/admin/admin.php (modified) (1 diff)

extensions/AddInfo/admin/admin.php

@@ -63 +63 @@
         if (pwg_db_num_rows($result)) {
                 while ($info = pwg_db_fetch_assoc($result)){
-                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo1.',"'.$info['info1'].'");';
+                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo1.',"'.htmlspecialchars($info['info1']).'");';
                         pwg_query($q);
-                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo2.',"'.$info['info2'].'");';
+                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo2.',"'.htmlspecialchars($info['info2']).'");';
                         pwg_query($q);
-                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo3.',"'.$info['info3'].'");';
+                        $q = 'INSERT INTO ' . $prefixeTable . 'add_properties_photos_data(id_img,id_prop_pho,data)VALUES ('.$info['id'].','.$idinfo3.',"'.htmlspecialchars($info['info3']).'");';
                         pwg_query($q);