Skip to content
Snippets Groups Projects
Commit ac1eecb7 authored by Dries Buytaert's avatar Dries Buytaert
Browse files 

- Small update wrt filters.
parent 8d0546bc
Branches
Tags
2 merge requests!7452Issue #1797438. HTML5 validation is preventing form submit and not fully...,!789Issue #3210310: Adjust Database API to remove deprecated Drupal 9 code in Drupal 10
Show whitespace changes
Inline Side-by-side
modules/comment.module
+ 3
− 3
View file @ ac1eecb7
......@@ -60,7 +60,7 @@ function comment_edit($id) {
}
function comment_save($id, $edit) {
db_query("UPDATE comments SET subject = '". check_input($edit[subject]) ."', comment = '". check_input($edit[comment]) ."' WHERE cid = '$id'");
db_query("UPDATE comments SET subject = '". check_input(filter($edit[subject])) ."', comment = '". check_input(filter($edit[comment])) ."' WHERE cid = '$id'");
watchdog("special", "comment: modified '$edit[subject]'");
}
......@@ -98,11 +98,11 @@ function comment_admin() {
print search_type("comment", "admin.php?mod=comment&op=search");
break;
case "delete":
print comment_delete(check_input($id));
print comment_delete(check_query($id));
print comment_overview();
break;
case t("Submit"):
print status(comment_save(check_input($id), $edit));
print status(comment_save(check_query($id), $edit));
print comment_overview();
break;
default:
......
modules/comment/comment.module
+ 3
− 3
View file @ ac1eecb7
......@@ -60,7 +60,7 @@ function comment_edit($id) {
}
function comment_save($id, $edit) {
db_query("UPDATE comments SET subject = '". check_input($edit[subject]) ."', comment = '". check_input($edit[comment]) ."' WHERE cid = '$id'");
db_query("UPDATE comments SET subject = '". check_input(filter($edit[subject])) ."', comment = '". check_input(filter($edit[comment])) ."' WHERE cid = '$id'");
watchdog("special", "comment: modified '$edit[subject]'");
}
......@@ -98,11 +98,11 @@ function comment_admin() {
print search_type("comment", "admin.php?mod=comment&op=search");
break;
case "delete":
print comment_delete(check_input($id));
print comment_delete(check_query($id));
print comment_overview();
break;
case t("Submit"):
print status(comment_save(check_input($id), $edit));
print status(comment_save(check_query($id), $edit));
print comment_overview();
break;
default:
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment