Changeset 25223

Timestamp:

Oct 29, 2013, 11:37:45 PM (10 years ago)

Author:

plg

Message:

bug 2992 fixed: escape all file names before searching them as duplicates in batch manager.

File:

• branches/2.5/admin/batch_manager.php (modified) (1 diff)

branches/2.5/admin/batch_manager.php

@@ -269 +269 @@
 SELECT id
   FROM '.IMAGES_TABLE.'
-  WHERE file IN (\''.implode("','", $duplicate_files).'\')
+  WHERE file IN (\''.implode("','", array_map('pwg_db_real_escape_string', $duplicate_files)).'\')
 ;';