Bug 1705 fixed : double quotes were not escaped

git-svn-id: http://piwigo.org/svn/trunk@6423 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
nikrou 2010-05-29 11:32:01 +00:00
parent 1c15024168
commit 0005a6eec1

View file

@ -158,7 +158,7 @@ INSERT INTO '.COMMENTS_TABLE.'
VALUES (
"'.$comm['author'].'",
'.$comm['author_id'].',
"'.$comm['content'].'",
"'.pwg_db_real_escape_string($comm['content']).'",
NOW(),
"'.($comment_action=='validate' ? 'true':'false').'",
'.($comment_action=='validate' ? 'NOW()':'NULL').',