Changeset 2030 for trunk/admin/comments.php

Timestamp:

Jun 7, 2007, 8:50:25 PM (17 years ago)

Author:

rub

Message:

Resolved issue 0000702: Code Injection with picture comment

File:

• trunk/admin/comments.php (modified) (1 diff)

trunk/admin/comments.php

@@ -163 +163 @@
       'ID' => $row['id'],
       'TN_SRC' => $thumb,
-      'AUTHOR' => $row['author'],
+      'AUTHOR' => trigger_event('render_comment_author', $row['author']),
       'DATE' => format_date($row['date'],'mysql_datetime',true),
       'CONTENT' => trigger_event('render_comment_content',$row['content'])