From bc12301421a7bebb2bbe7801ddc2eeba6f55db8f Mon Sep 17 00:00:00 2001 From: nikrou Date: Sat, 29 May 2010 11:35:26 +0000 Subject: Bug 1705 fixed : User cannot add comment with double quotes Merge from trunk git-svn-id: http://piwigo.org/svn/branches/2.1@6424 68402e56-0260-453c-a942-63ccdbb3a9ee --- include/functions_comment.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/functions_comment.inc.php b/include/functions_comment.inc.php index feec4d25c..454895832 100644 --- a/include/functions_comment.inc.php +++ b/include/functions_comment.inc.php @@ -158,7 +158,7 @@ INSERT INTO '.COMMENTS_TABLE.' VALUES ( "'.$comm['author'].'", '.$comm['author_id'].', - "'.$comm['content'].'", + "'.pwg_db_real_escape_string($comm['content']).'", NOW(), "'.($comment_action=='validate' ? 'true':'false').'", '.($comment_action=='validate' ? 'NOW()':'NULL').', -- cgit v1.2.3