Changeset 3452 for trunk/include/picture_comment.inc.php

Timestamp:

Jun 24, 2009, 9:00:40 PM (15 years ago)

Author:

nikrou

Message:

Fix two problem with Feature 1026 :
use of $confuser_fieldsusername and $confuser_fieldsid instead of username and id
escape comment content before editing it.

File:

• trunk/include/picture_comment.inc.php (modified) (1 diff)

trunk/include/picture_comment.inc.php

@@ -129 +129 @@
 
     $query = '
-SELECT com.id,author,author_id,username,date,image_id,content,validated
+SELECT com.id,author,author_id,'.$conf['user_fields']['username'].' AS username,
+  date,image_id,content,validated
   FROM '.COMMENTS_TABLE.' AS com
   LEFT JOIN '.USERS_TABLE.' AS u
-    ON u.id = author_id
+    ON u.'.$conf['user_fields']['id'].' = author_id
   WHERE image_id = '.$page['image_id'].
 $validated_clause.'