Changeset 3488 for trunk/include/picture_comment.inc.php

Timestamp:

Jul 1, 2009, 10:56:41 PM (15 years ago)

Author:

rvelices

Message:

• remove warn on unset variable
• insert_user_comment expects now the comment content to be sql safe (works now exactly as update_user_comment)

File:

• trunk/include/picture_comment.inc.php (modified) (4 diffs)

trunk/include/picture_comment.inc.php

@@ -47 +47 @@
 
   $comm = array(
-    'author' => trim( stripslashes(@$_POST['author']) ),
-    'content' => trim( stripslashes($_POST['content']) ),
+    'author' => trim(@$_POST['author']),
+    'content' => trim($_POST['content']),
     'image_id' => $page['image_id'],
    );
@@ -122 +122 @@
     {
       $validated_clause = '  AND validated = \'true\'';
-    } 
-    else 
+    }
+    else
     {
       $validated_clause = '';
@@ -143 +143 @@
     while ($row = mysql_fetch_array($result))
     {
-      if (!empty($row['author'])) 
+      if (!empty($row['author']))
       {
         $author = $row['author'];
@@ -196 +196 @@
         if ($row['validated'] != 'true')
         {
-          $tpl_comment['U_VALIDATE'] = 
+          $tpl_comment['U_VALIDATE'] =
             add_url_params($url_self,
                            array('action' => 'validate_comment',