diff options
Diffstat (limited to 'phpBB/admin/admin_ranks.php')
| -rw-r--r-- | phpBB/admin/admin_ranks.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/phpBB/admin/admin_ranks.php b/phpBB/admin/admin_ranks.php index d7562aa6da..55d3ef6487 100644 --- a/phpBB/admin/admin_ranks.php +++ b/phpBB/admin/admin_ranks.php @@ -164,7 +164,7 @@ if( $mode != "" ) if( $rank_id ) { $sql = "UPDATE " . RANKS_TABLE . " - SET rank_title = '$rank_title', rank_special = $special_rank, rank_max = 0, rank_min = $min_posts, rank_image = '$rank_image' + SET rank_title = '" . str_replace("\'", "''", $rank_title) . "', rank_special = $special_rank, rank_max = 0, rank_min = $min_posts, rank_image = '" . str_replace("\'", "''", $rank_image) . "' WHERE rank_id = $rank_id"; $message = $lang['Rank_updated']; @@ -172,7 +172,7 @@ if( $mode != "" ) else { $sql = "INSERT INTO " . RANKS_TABLE . " (rank_title, rank_special, rank_max, rank_min, rank_image) - VALUES ('$rank_title', $special_rank, 0, $min_posts, '$rank_image')"; + VALUES ('" . str_replace("\'", "''", $rank_title) . "', $special_rank, 0, $min_posts, '" . str_replace("\'", "''", $rank_image) . "')"; $message = $lang['Rank_added']; } @@ -352,4 +352,4 @@ $template->pparse("body"); include('page_footer_admin.'.$phpEx); -?> +?>
\ No newline at end of file |