Changeset 868 for trunk/include

Timestamp:

Sep 18, 2005, 11:56:56 PM (19 years ago)

Author:

plg

Message:

• bug 107 fixed: crash when logging visit on a category containing "'" character. Correction reported from branch 1.4

• bug fixed: in admin/stats, incorrect SQL queries gave no result.

File:

• trunk/include/functions.inc.php (modified) (1 diff)

trunk/include/functions.inc.php

@@ -360 +360 @@
   VALUES
   (NOW(),
-  \''.(($user['id'] == 2) ? 'guest' : $user['username']).'\',
+  \''.(($user['id'] == 2) ? 'guest' : addslashes($user['username'])).'\',
   \''.$_SERVER['REMOTE_ADDR'].'\',
-  \''.$file.'\',
-  \''.$category.'\',
-  \''.$picture.'\')
+  \''.addslashes($file).'\',
+  \''.addslashes($category).'\',
+  \''.addslashes($picture).'\')
 ;';
     pwg_query($query);