Skip to content

GitLab

Commit ac1eecb7 authored by Dries's avatar Dries
Browse files
Options 

- Small update wrt filters.
parent 8d0546bc
Hide whitespace changes
Inline Side-by-side
Showing with 6 additions and 6 deletions
modules/comment.module
View file @ ac1eecb7
......@@ -60,7 +60,7 @@ function comment_edit($id) {
}
function comment_save($id, $edit) {
db_query("UPDATE comments SET subject = '". check_input($edit[subject]) ."', comment = '". check_input($edit[comment]) ."' WHERE cid = '$id'");
db_query("UPDATE comments SET subject = '". check_input(filter($edit[subject])) ."', comment = '". check_input(filter($edit[comment])) ."' WHERE cid = '$id'");
watchdog("special", "comment: modified '$edit[subject]'");
}
......@@ -98,11 +98,11 @@ function comment_admin() {
print search_type("comment", "admin.php?mod=comment&op=search");
break;
case "delete":
print comment_delete(check_input($id));
print comment_delete(check_query($id));
print comment_overview();
break;
case t("Submit"):
print status(comment_save(check_input($id), $edit));
print status(comment_save(check_query($id), $edit));
print comment_overview();
break;
default:
......
modules/comment/comment.module
View file @ ac1eecb7
......@@ -60,7 +60,7 @@ function comment_edit($id) {
}
function comment_save($id, $edit) {
db_query("UPDATE comments SET subject = '". check_input($edit[subject]) ."', comment = '". check_input($edit[comment]) ."' WHERE cid = '$id'");
db_query("UPDATE comments SET subject = '". check_input(filter($edit[subject])) ."', comment = '". check_input(filter($edit[comment])) ."' WHERE cid = '$id'");
watchdog("special", "comment: modified '$edit[subject]'");
}
......@@ -98,11 +98,11 @@ function comment_admin() {
print search_type("comment", "admin.php?mod=comment&op=search");
break;
case "delete":
print comment_delete(check_input($id));
print comment_delete(check_query($id));
print comment_overview();
break;
case t("Submit"):
print status(comment_save(check_input($id), $edit));
print status(comment_save(check_query($id), $edit));
print comment_overview();
break;
default:
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment