Ignore:
Timestamp:
Sep 18, 2007, 6:41:36 PM (17 years ago)
Author:
patdenice
Message:

0000734: bug on tags edition

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/branch-1_7/admin/tags.php

    r1932 r2092  
    6464    if (function_exists('mysql_real_escape_string'))
    6565    {
    66       $tag_name = mysql_real_escape_string($_POST['tag_name-'.$tag_id]);
     66      $tag_name = mysql_real_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
    6767    }
    6868    else
    6969    {
    70       $tag_name = mysql_escape_string($_POST['tag_name-'.$tag_id]);
     70      $tag_name = mysql_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
    7171    }
    7272
     
    149149if (isset($_POST['add']) and !empty($_POST['add_tag']) and !is_adviser())
    150150{
    151   $tag_name = $_POST['add_tag'];
     151  if (function_exists('mysql_real_escape_string'))
     152  {
     153    $tag_name = mysql_real_escape_string(stripslashes($_POST['add_tag']));
     154  }
     155  else
     156  {
     157    $tag_name = mysql_escape_string(stripslashes($_POST['add_tag']));
     158  }
    152159
    153160  // does the tag already exists?
Note: See TracChangeset for help on using the changeset viewer.