Author: pwang
Date: 2013-02-07 15:37:25 -0800 (Thu, 07 Feb 2013)
New Revision: 31111

Modified:
   new_cytoscape_website/bugreport/bugreportdelete.php
   new_cytoscape_website/bugreport/bugreportview.php
Log:
Use mysql_real_escape_string()

Modified: new_cytoscape_website/bugreport/bugreportdelete.php
===================================================================
--- new_cytoscape_website/bugreport/bugreportdelete.php 2013-02-05 20:49:35 UTC 
(rev 31110)
+++ new_cytoscape_website/bugreport/bugreportdelete.php 2013-02-07 23:37:25 UTC 
(rev 31111)
@@ -3,7 +3,7 @@
 <?php
 include 'functions.php';
 
-$bugid = getBugID($_GET, $_POST);
+$bugid = mysql_real_escape_string(getBugID($_GET, $_POST));
 
 $deleteAction = NULL;
 if (isset ($_POST['delete'])) {

Modified: new_cytoscape_website/bugreport/bugreportview.php
===================================================================
--- new_cytoscape_website/bugreport/bugreportview.php   2013-02-05 20:49:35 UTC 
(rev 31110)
+++ new_cytoscape_website/bugreport/bugreportview.php   2013-02-07 23:37:25 UTC 
(rev 31111)
@@ -6,7 +6,7 @@
 
 $bugid = null;
 if (isset ($_GET['bugid'])) {
-               $bugid = ($_GET['bugid']);
+               $bugid = mysql_real_escape_string(($_GET['bugid']));
 }
 else {
        exit("BugID unknow!");

-- 
You received this message because you are subscribed to the Google Groups 
"cytoscape-cvs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/cytoscape-cvs?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to