From 11567fb57b1f36dc7e1387b88ab01d5fa2073c45 Mon Sep 17 00:00:00 2001 From: patdenice Date: Wed, 19 Sep 2007 06:49:39 +0000 Subject: 0000734: bug on tags edition Useless functions removed git-svn-id: http://piwigo.org/svn/trunk@2098 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/tags.php | 20 +++----------------- 1 file changed, 3 insertions(+), 17 deletions(-) (limited to 'admin/tags.php') diff --git a/admin/tags.php b/admin/tags.php index b3ef994b4..1d7e3ffdb 100644 --- a/admin/tags.php +++ b/admin/tags.php @@ -61,14 +61,7 @@ SELECT id, name // we must not rename tag with an already existing name foreach (explode(',', $_POST['edit_list']) as $tag_id) { - if (function_exists('mysql_real_escape_string')) - { - $tag_name = mysql_real_escape_string(stripslashes($_POST['tag_name-'.$tag_id])); - } - else - { - $tag_name = mysql_escape_string(stripslashes($_POST['tag_name-'.$tag_id])); - } + $tag_name = stripslashes($_POST['tag_name-'.$tag_id]); if ($tag_name != $current_name_of[$tag_id]) { @@ -88,7 +81,7 @@ SELECT id, name $updates, array( 'id' => $tag_id, - 'name' => $tag_name, + 'name' => addslashes($tag_name), 'url_name' => str2url($tag_name), ) ); @@ -148,14 +141,7 @@ DELETE if (isset($_POST['add']) and !empty($_POST['add_tag']) and !is_adviser()) { - if (function_exists('mysql_real_escape_string')) - { - $tag_name = mysql_real_escape_string(stripslashes($_POST['add_tag'])); - } - else - { - $tag_name = mysql_escape_string(stripslashes($_POST['add_tag'])); - } + $tag_name = $_POST['add_tag']; // does the tag already exists? $query = ' -- cgit v1.2.3