cvs: php-bugs-web / report.php /include functions.inc

wez Sun Jan 19 06:54:29 2003 EDT Modified files: /php-bugs-web report.php /php-bugs-web/include functions.inc Log: Ensure that single quotes are quoted for queries. Index: php-bugs-web/report.php diff -u php-bugs-web/report.php:1.29 php-bugs-web/report.php:1.30 --- php-bugs-web/report.php:1.29 Sat Jan 18 17:16:40 2003 +++ php-bugs-web/report.php Sun Jan 19 06:54:28 2003 @@ -30,7 +30,7 @@ /* search for a match using keywords from the subject */ - $sdesc = stripslashes($in['sdesc']); + $sdesc = rinse($in['sdesc']); /* if they are filing a feature request, only look for similar features */ $bug_type = $in['bug_type']; Index: php-bugs-web/include/functions.inc diff -u php-bugs-web/include/functions.inc:1.61 php-bugs-web/include/functions.inc:1.62 --- php-bugs-web/include/functions.inc:1.61 Sat Jan 18 20:16:00 2003 +++ php-bugs-web/include/functions.inc Sun Jan 19 06:54:28 2003 @@ -494,7 +494,7 @@ } } - return array(" AND MATCH (email,sdesc,ldesc) AGAINST ('$search')", $ignored); + return array(" AND MATCH (email,sdesc,ldesc) AGAINST ('" . addslashes($search) . "')", $ignored); } ?>