markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too

This commit is contained in:
czaks 2013-07-31 20:33:27 -04:00 committed by Michael Foster
parent 38cc2d77f8
commit 05fb4cbca4

View File

@ -61,7 +61,8 @@ function ban($mask, $reason, $length, $board) {
$query->bindValue(':mod', $mod['id']);
$query->bindValue(':time', time());
if ($reason !== '') {
markup($reason);
$reason = escape_markup_modifiers($reason);
$reason = markup($reason);
$query->bindValue(':reason', $reason);
} else
$query->bindValue(':reason', null, PDO::PARAM_NULL);