makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-30 07:08:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

Non-slashed serialised data for admin logs... oops

Browse source 
git-svn-id: file:///svn/phpbb/trunk@2800 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2002-08-01 14:08:18 +00:00
parent aab6df3ce4
commit 3aceae9272
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
phpBB/admin/pagestart.php
View file

@ -127,7 +127,7 @@ function add_admin_log()
$arguments = func_get_args(); $arguments = func_get_args();
$action = array_shift($arguments); $action = array_shift($arguments);
$data = ( !sizeof($arguments) ) ? '' : serialize($arguments); $data = ( !sizeof($arguments) ) ? '' : addslashes(serialize($arguments));
$sql = "INSERT INTO " . LOG_ADMIN_TABLE . " (user_id, log_ip, log_time, log_operation, log_data) $sql = "INSERT INTO " . LOG_ADMIN_TABLE . " (user_id, log_ip, log_time, log_operation, log_data)
VALUES (" . $userdata['user_id'] . ", '$user_ip', " . time() . ", '$action', '$data')"; VALUES (" . $userdata['user_id'] . ", '$user_ip', " . time() . ", '$action', '$data')";
@ -164,7 +164,7 @@ function view_admin_log($limit = 0, $offset = 0, $limit_days = 0, $sort_by = 'l.
if ( !empty($row['log_data']) ) if ( !empty($row['log_data']) )
{ {
$log_data_ary = unserialize($row['log_data']); $log_data_ary = unserialize(stripslashes($row['log_data']));
foreach ( $log_data_ary as $log_data ) foreach ( $log_data_ary as $log_data )
{ {