Show
Ignore:
Timestamp:
12/28/06 12:17:35 (23 months ago)
Author:
mbonetti
Message:

Tiny tweaks on admin/tags

Files:
1 modified

Legend:

Unmodified
Added
Removed

  • trunk/gregarius/admin/tags.php

    r1580 r1643  
    108108        $new_label = str_replace(' ','',$new_label); 
    109109        if (is_numeric($tid) && strlen($new_label) > 0) { 
    110             $res = rss_query("select count(*) as cnt from " . getTable("tag") ." where binary tag='$new_label'"); 
     110            $res = rss_query("select count(*) as cnt from " . getTable("tag") ." where binary tag='".rss_real_escape_string($new_label)."'"); 
    111111            list($cnt) = rss_fetch_row($res); 
    112112            if ($cnt > 0) { 
    … …  
    114114                break; 
    115115            } 
    116             rss_query("update " .getTable("tag") ." set tag='$new_label' where id=$tid"); 
     116            rss_query("update " .getTable("tag") ." set tag='".rss_real_escape_string($new_label)."' where id=$tid"); 
    117117            rss_invalidate_cache(); 
    118118        }