kashire/lainchan
4
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity

markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too

Browse Source
This commit is contained in:
czaks 2013-07-31 20:33:27 -04:00
parent d7ea47a91f
commit ce2af291b0
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
inc/mod/ban.php
View File

@ -61,7 +61,8 @@ function ban($mask, $reason, $length, $board) {
$query->bindValue(':mod', $mod['id']); $query->bindValue(':mod', $mod['id']);
$query->bindValue(':time', time()); $query->bindValue(':time', time());
if ($reason !== '') { if ($reason !== '') {
markup($reason); $reason = escape_markup_modifiers($reason);
$reason = markup($reason);
$query->bindValue(':reason', $reason); $query->bindValue(':reason', $reason);
} else } else
$query->bindValue(':reason', null, PDO::PARAM_NULL); $query->bindValue(':reason', null, PDO::PARAM_NULL);