Changeset 784

Timestamp:

May 2, 2005, 10:44:27 PM (19 years ago)

Author:

plg

Message:

• bug 107 fixed : "crash when virtual category name contains a quote". In fact, the problem was in log line insertion. Category name must be "addslashed".

File:

• branches/branch-1_4/include/functions.inc.php (modified) (1 diff)

branches/branch-1_4/include/functions.inc.php

@@ -341 +341 @@
   VALUES
   (NOW(),
-  \''.(($user['id'] == 2) ? 'guest' : $user['username']).'\',
+  \''.(($user['id'] == 2) ? 'guest' : addslashes($user['username'])).'\',
   \''.$_SERVER['REMOTE_ADDR'].'\',
-  \''.$file.'\',
-  \''.$category.'\',
-  \''.$picture.'\')
+  \''.addslashes($file).'\',
+  \''.addslashes($category).'\',
+  \''.addslashes($picture).'\')
 ;';
     pwg_query($query);