From e2bf31e482923836120c9abcd38767e5693ac28d Mon Sep 17 00:00:00 2001 From: plegall Date: Fri, 4 Mar 2016 15:26:16 +0100 Subject: bug fixed, escape language string before insert --- install.php | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'install.php') diff --git a/install.php b/install.php index 579b1a431..475cf70f0 100644 --- a/install.php +++ b/install.php @@ -348,8 +348,12 @@ INSERT INTO '.$prefixeTable.'config (param,value,comment) pwg_query($query); conf_update_param('piwigo_db_version', get_branch_from_version(PHPWG_VERSION)); - conf_update_param('gallery_title', l10n('Just another Piwigo gallery')); - conf_update_param('page_banner', '

%gallery_title%

'."\n\n

".l10n('Welcome to my photo gallery').'

'); + conf_update_param('gallery_title', pwg_db_real_escape_string(l10n('Just another Piwigo gallery'))); + + conf_update_param( + 'page_banner', + '

%gallery_title%

'."\n\n

".pwg_db_real_escape_string(l10n('Welcome to my photo gallery')).'

' + ); // fill languages table foreach ($languages->fs_languages as $language_code => $fs_language) -- cgit v1.2.3