From 0b94b93242f376b9600c36380fa8ccbdeef56ad8 Mon Sep 17 00:00:00 2001 From: "Paul S. Owen" Date: Mon, 24 Dec 2001 13:35:09 +0000 Subject: [PATCH] For Christmas I'd like a \', no damn it, that's not what I'd like ... git-svn-id: file:///svn/phpbb/trunk@1689 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/admin/admin_words.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/phpBB/admin/admin_words.php b/phpBB/admin/admin_words.php index 9b1884611a..e550f15834 100644 --- a/phpBB/admin/admin_words.php +++ b/phpBB/admin/admin_words.php @@ -122,14 +122,14 @@ if( $mode != "" ) if( $word_id ) { $sql = "UPDATE " . WORDS_TABLE . " - SET word = '$word', replacement = '$replacement' + SET word = '" . str_replace("\'", "''", $word) . "', replacement = '" . str_replace("\'", "''", $replacement) . "' WHERE word_id = $word_id"; $message = $lang['Word_updated']; } else { $sql = "INSERT INTO " . WORDS_TABLE . " (word, replacement) - VALUES ('$word', '$replacement')"; + VALUES ('" . str_replace("\'", "''", $word) . "', '" . str_replace("\'", "''", $replacement) . "')"; $message = $lang['Word_added']; }