From fcb3c824a0ee2c750453de1ccc12dd4a9af8f0b0 Mon Sep 17 00:00:00 2001 From: rub Date: Thu, 7 Jun 2007 18:52:40 +0000 Subject: Resolved issue 0000702: Code Injection with picture comment Merge BSF 2029:2030 into branch-1_7 git-svn-id: http://piwigo.org/svn/branches/branch-1_7@2031 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/comments.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'admin/comments.php') diff --git a/admin/comments.php b/admin/comments.php index 6bba32a96..bae32dcb3 100644 --- a/admin/comments.php +++ b/admin/comments.php @@ -162,7 +162,7 @@ while ($row = mysql_fetch_assoc($result)) '&image_id='.$row['image_id'], 'ID' => $row['id'], 'TN_SRC' => $thumb, - 'AUTHOR' => $row['author'], + 'AUTHOR' => trigger_event('render_comment_author', $row['author']), 'DATE' => format_date($row['date'],'mysql_datetime',true), 'CONTENT' => trigger_event('render_comment_content',$row['content']) ) -- cgit v1.2.3