diff options
| author | rvelices <rv-github@modusoptimus.com> | 2010-06-01 19:52:44 +0000 |
|---|---|---|
| committer | rvelices <rv-github@modusoptimus.com> | 2010-06-01 19:52:44 +0000 |
| commit | 2a99a22130e448409e05aa58d314ce2b1ecfb7eb (patch) | |
| tree | 9c31e3a7bbdb5d3fdd32fbcc696b6d9b6f797578 /include/picture_comment.inc.php | |
| parent | d7b71e2167dc0a9d551af08b6fc53c03b431cee3 (diff) | |
- do not remove slashes before calling insert_user_comment (homogeneity with update_user_comment and general use of slashes in piwigo)
- when using a modifier on a non array variable use @| instead of | (generated code is simpler and faster)
git-svn-id: http://piwigo.org/svn/trunk@6437 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
| -rw-r--r-- | include/picture_comment.inc.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/include/picture_comment.inc.php b/include/picture_comment.inc.php index ac0cd9356..cc4970a34 100644 --- a/include/picture_comment.inc.php +++ b/include/picture_comment.inc.php @@ -46,8 +46,8 @@ if ( $page['show_comments'] and isset( $_POST['content'] ) ) } $comm = array( - 'author' => trim( stripslashes(@$_POST['author']) ), - 'content' => trim( stripslashes($_POST['content']) ), + 'author' => trim( @$_POST['author'] ), + 'content' => trim( $_POST['content'] ), 'image_id' => $page['image_id'], ); @@ -237,7 +237,7 @@ SELECT $content = ''; if ('reject'===@$comment_action) { - $content = htmlspecialchars($comm['content']); + $content = htmlspecialchars( stripslashes($comm['content']) ); } $template->assign('comment_add', array( |