diff options
author | natec <natec@users.sourceforge.net> | 2001-10-09 19:59:43 +0000 |
---|---|---|
committer | natec <natec@users.sourceforge.net> | 2001-10-09 19:59:43 +0000 |
commit | 03a53c37202321d4b6bd3b978b9faa6a19efc90f (patch) | |
tree | 178e9cf32980c726e01e398c642ccd8a0f2f54bb /phpBB/modcp.php | |
parent | fe15c893cbb3d7bbf621a8dd19092e068a009201 (diff) | |
download | forums-03a53c37202321d4b6bd3b978b9faa6a19efc90f.tar forums-03a53c37202321d4b6bd3b978b9faa6a19efc90f.tar.gz forums-03a53c37202321d4b6bd3b978b9faa6a19efc90f.tar.bz2 forums-03a53c37202321d4b6bd3b978b9faa6a19efc90f.tar.xz forums-03a53c37202321d4b6bd3b978b9faa6a19efc90f.zip |
Fixed bug 468765 - addslashes to topic title when moving topics.
git-svn-id: file:///svn/phpbb/trunk@1142 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/modcp.php')
-rw-r--r-- | phpBB/modcp.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/modcp.php b/phpBB/modcp.php index 677d9ea1f7..5c2fc26620 100644 --- a/phpBB/modcp.php +++ b/phpBB/modcp.php @@ -410,7 +410,7 @@ switch($mode) $topic_id = $row[$i]['topic_id']; $sql = "INSERT INTO " . TOPICS_TABLE . " (forum_id, topic_title, topic_poster, topic_time, topic_status, topic_type, topic_vote, topic_views, topic_replies, topic_last_post_id, topic_moved_id) - VALUES ($old_forum_id, '" . $row[$i]['topic_title'] . "', '" . $row[$i]['topic_poster'] . "', " . $row[$i]['topic_time'] . ", " . TOPIC_MOVED . ", " . POST_NORMAL . ", " . $row[$i]['topic_vote'] . ", " . $row[$i]['topic_views'] . ", " . $row[$i]['topic_replies'] . ", " . $row[$i]['topic_last_post_id'] . ", $topic_id)"; + VALUES ($old_forum_id, '" . addslashes($row[$i]['topic_title']) . "', '" . $row[$i]['topic_poster'] . "', " . $row[$i]['topic_time'] . ", " . TOPIC_MOVED . ", " . POST_NORMAL . ", " . $row[$i]['topic_vote'] . ", " . $row[$i]['topic_views'] . ", " . $row[$i]['topic_replies'] . ", " . $row[$i]['topic_last_post_id'] . ", $topic_id)"; if( !$result = $db->sql_query($sql) ) { message_die(GENERAL_ERROR, "Could not insert new topic", "Error", __LINE__, __FILE__, $sql); |