Skip to content
GitLab
Menu
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
project
drupal
Commits
c5da43fa
Commit
c5da43fa
authored
Oct 15, 2002
by
Steven Wittens
Browse files
- Fixed missing filtering
parent
1ff4da96
Changes
2
Show whitespace changes
Inline
Side-by-side
modules/poll.module
View file @
c5da43fa
...
...
@@ -136,7 +136,7 @@ function poll_insert($node) {
$node
->
active
=
1
;
}
db_query
(
"INSERT INTO poll (nid, runtime, voters, active) VALUES ('
$node->nid
', '
$node->runtime
', '', '
$node->active
')"
);
db_query
(
"INSERT INTO poll (nid, runtime, voters, active) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$node
->
runtime
)
.
"
', '', '
"
.
check_input
(
$node
->
active
)
.
"
')"
);
for
(
$i
=
0
;
$i
<
$node
->
choices
;
$i
++
)
{
$choice
->
chtext
=
filter
(
$node
->
choice
[
$i
]);
...
...
@@ -144,7 +144,7 @@ function poll_insert($node) {
$choice
->
chorder
=
$i
;
if
(
$choice
->
chtext
!=
""
)
{
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
$node->nid
', '
$choice->chtext
', '
$choice->chvotes
', '
$choice->chorder
')"
);
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$choice
->
chtext
)
.
"', '"
.
check_input
(
$choice
->
chvotes
)
.
"', '"
.
check_input
(
$choice
->
chorder
)
.
"
')"
);
}
}
}
...
...
@@ -404,7 +404,7 @@ function poll_update($node) {
$choice
->
chorder
=
$i
;
if
(
$choice
->
chtext
!=
""
)
{
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
$node->nid
', '
$choice->chtext
', '
$choice->chvotes
', '
$choice->chorder
')"
);
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$choice
->
chtext
)
.
"', '"
.
check_input
(
$choice
->
chvotes
)
.
"', '"
.
check_input
(
$choice
->
chorder
)
.
"
')"
);
}
}
}
...
...
modules/poll/poll.module
View file @
c5da43fa
...
...
@@ -136,7 +136,7 @@ function poll_insert($node) {
$node
->
active
=
1
;
}
db_query
(
"INSERT INTO poll (nid, runtime, voters, active) VALUES ('
$node->nid
', '
$node->runtime
', '', '
$node->active
')"
);
db_query
(
"INSERT INTO poll (nid, runtime, voters, active) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$node
->
runtime
)
.
"
', '', '
"
.
check_input
(
$node
->
active
)
.
"
')"
);
for
(
$i
=
0
;
$i
<
$node
->
choices
;
$i
++
)
{
$choice
->
chtext
=
filter
(
$node
->
choice
[
$i
]);
...
...
@@ -144,7 +144,7 @@ function poll_insert($node) {
$choice
->
chorder
=
$i
;
if
(
$choice
->
chtext
!=
""
)
{
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
$node->nid
', '
$choice->chtext
', '
$choice->chvotes
', '
$choice->chorder
')"
);
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$choice
->
chtext
)
.
"', '"
.
check_input
(
$choice
->
chvotes
)
.
"', '"
.
check_input
(
$choice
->
chorder
)
.
"
')"
);
}
}
}
...
...
@@ -404,7 +404,7 @@ function poll_update($node) {
$choice
->
chorder
=
$i
;
if
(
$choice
->
chtext
!=
""
)
{
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
$node->nid
', '
$choice->chtext
', '
$choice->chvotes
', '
$choice->chorder
')"
);
db_query
(
"INSERT INTO poll_choices (nid, chtext, chvotes, chorder) VALUES ('
"
.
check_input
(
$node
->
nid
)
.
"', '"
.
check_input
(
$choice
->
chtext
)
.
"', '"
.
check_input
(
$choice
->
chvotes
)
.
"', '"
.
check_input
(
$choice
->
chorder
)
.
"
')"
);
}
}
}
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment