bug fixed, escape language string before insert

This commit is contained in:
plegall 2016-03-04 15:26:16 +01:00
parent 91276709b4
commit e2bf31e482

View file

@ -348,8 +348,12 @@ INSERT INTO '.$prefixeTable.'config (param,value,comment)
pwg_query($query);
conf_update_param('piwigo_db_version', get_branch_from_version(PHPWG_VERSION));
conf_update_param('gallery_title', l10n('Just another Piwigo gallery'));
conf_update_param('page_banner', '<h1>%gallery_title%</h1>'."\n\n<p>".l10n('Welcome to my photo gallery').'</p>');
conf_update_param('gallery_title', pwg_db_real_escape_string(l10n('Just another Piwigo gallery')));
conf_update_param(
'page_banner',
'<h1>%gallery_title%</h1>'."\n\n<p>".pwg_db_real_escape_string(l10n('Welcome to my photo gallery')).'</p>'
);
// fill languages table
foreach ($languages->fs_languages as $language_code => $fs_language)