From df56834db44c617a8cfedbc56d0fb7b6be1f8c44 Mon Sep 17 00:00:00 2001 From: plegall Date: Tue, 29 Oct 2013 22:37:45 +0000 Subject: bug 2992 fixed: escape all file names before searching them as duplicates in batch manager. git-svn-id: http://piwigo.org/svn/branches/2.5@25223 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/batch_manager.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin/batch_manager.php b/admin/batch_manager.php index b9dbe4de6..c0ecc05c8 100644 --- a/admin/batch_manager.php +++ b/admin/batch_manager.php @@ -268,7 +268,7 @@ SELECT file $query = ' SELECT id FROM '.IMAGES_TABLE.' - WHERE file IN (\''.implode("','", $duplicate_files).'\') + WHERE file IN (\''.implode("','", array_map('pwg_db_real_escape_string', $duplicate_files)).'\') ;'; array_push( -- cgit v1.2.3