Changeset 4305

Timestamp:

Nov 18, 2009, 10:14:58 PM (15 years ago)

Author:

Eric

Message:

Forgotten Comments author name to be escaped and correctly displayed

File:

• trunk/include/functions_comment.inc.php (modified) (1 diff)

trunk/include/functions_comment.inc.php

@@ -157 +157 @@
   (author, author_id, content, date, validated, validation_date, image_id)
   VALUES (
-    "'.$comm['author'].'",
+    "'.addslashes($comm['author']).'",
     '.$comm['author_id'].',
-    "'.$comm['content'].'",
+    "'.addslashes($comm['content']).'",
     NOW(),
     "'.($comment_action=='validate' ? 'true':'false').'",