From d1ac6441e8dd3067e546f884d82e151692f18eb3 Mon Sep 17 00:00:00 2001
From: rvelices <rv-github@modusoptimus.com>
Date: Wed, 16 Apr 2014 05:13:10 +0000
Subject: bug 2971: i.php should escape source location

git-svn-id: http://piwigo.org/svn/trunk@28198 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 i.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'i.php')

diff --git a/i.php b/i.php
index 8ca3b68c2..0d252be99 100644
--- a/i.php
+++ b/i.php
@@ -468,7 +468,7 @@ if (strpos($page['src_location'], '/pwg_representative/')===false
     $query = '
 SELECT *
   FROM '.$prefixeTable.'images
-  WHERE path=\''.$page['src_location'].'\'
+  WHERE path=\''.addslashes($page['src_location']).'\'
 ;';
 
     if ( ($row=pwg_db_fetch_assoc(pwg_query($query))) )
-- 
cgit v1.2.3