Changeset 2031 for branches/branch-1_7/admin/comments.php

Timestamp:

Jun 7, 2007, 8:52:40 PM (17 years ago)

Author:

rub

Message:

Resolved issue 0000702: Code Injection with picture comment

Merge BSF 2029:2030 into branch-1_7

File:

• branches/branch-1_7/admin/comments.php (modified) (1 diff)

branches/branch-1_7/admin/comments.php

@@ -163 +163 @@
       'ID' => $row['id'],
       'TN_SRC' => $thumb,
-      'AUTHOR' => $row['author'],
+      'AUTHOR' => trigger_event('render_comment_author', $row['author']),
       'DATE' => format_date($row['date'],'mysql_datetime',true),
       'CONTENT' => trigger_event('render_comment_content',$row['content'])