diff --git a/modules/poll.module b/modules/poll.module index d2ac76cbe0f92af464570f1c1c51954147f3177b..3994a4f3bec8e195a599ab4727cb7ed52c47722a 100644 --- a/modules/poll.module +++ b/modules/poll.module @@ -146,7 +146,7 @@ function poll_insert($node) { for ($i = 0; $i < $node->choices; $i++) { if ($node->choice[$i] != "") { - db_query("INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('%d', '%s', '%d', '%d')", $node->nid, $node->choice[$i], $node->chvotes[$i], $i); + db_query("INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('%d', '%s', '%d', '%d')", $node->nid, filter($node->choice[$i]), $node->chvotes[$i], $i); } } } diff --git a/modules/poll/poll.module b/modules/poll/poll.module index d2ac76cbe0f92af464570f1c1c51954147f3177b..3994a4f3bec8e195a599ab4727cb7ed52c47722a 100644 --- a/modules/poll/poll.module +++ b/modules/poll/poll.module @@ -146,7 +146,7 @@ function poll_insert($node) { for ($i = 0; $i < $node->choices; $i++) { if ($node->choice[$i] != "") { - db_query("INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('%d', '%s', '%d', '%d')", $node->nid, $node->choice[$i], $node->chvotes[$i], $i); + db_query("INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('%d', '%s', '%d', '%d')", $node->nid, filter($node->choice[$i]), $node->chvotes[$i], $i); } } }