From 3fbc92f61e1cf362982d3e9697bf5261868cbb2c Mon Sep 17 00:00:00 2001
From: rub <rub@piwigo.org>
Date: Thu, 7 Jun 2007 18:50:25 +0000
Subject: Resolved issue 0000702: Code Injection with picture comment

git-svn-id: http://piwigo.org/svn/trunk@2030 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 comments.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'comments.php')

diff --git a/comments.php b/comments.php
index de328152f..efcd7dfb5 100644
--- a/comments.php
+++ b/comments.php
@@ -411,7 +411,7 @@ SELECT id, name, permalink, uppercats
         'U_PICTURE' => $url,
         'TN_SRC' => $thumbnail_src,
         'ALT' => $name,
-        'AUTHOR' => $author,
+        'AUTHOR' => trigger_event('render_comment_author', $author),
         'DATE'=>format_date($comment['date'],'mysql_datetime',true),
         'CONTENT'=>trigger_event('render_comment_content',$comment['content']),
         ));
-- 
cgit v1.2.3