Author: pwang
Date: 2013-02-07 15:37:25 -0800 (Thu, 07 Feb 2013)
New Revision: 31111
Modified:
new_cytoscape_website/bugreport/bugreportdelete.php
new_cytoscape_website/bugreport/bugreportview.php
Log:
Use mysql_real_escape_string()
Modified: new_cytoscape_website/bugreport/bugreportdelete.php
===================================================================
--- new_cytoscape_website/bugreport/bugreportdelete.php 2013-02-05 20:49:35 UTC
(rev 31110)
+++ new_cytoscape_website/bugreport/bugreportdelete.php 2013-02-07 23:37:25 UTC
(rev 31111)
@@ -3,7 +3,7 @@
<?php
include 'functions.php';
-$bugid = getBugID($_GET, $_POST);
+$bugid = mysql_real_escape_string(getBugID($_GET, $_POST));
$deleteAction = NULL;
if (isset ($_POST['delete'])) {
Modified: new_cytoscape_website/bugreport/bugreportview.php
===================================================================
--- new_cytoscape_website/bugreport/bugreportview.php 2013-02-05 20:49:35 UTC
(rev 31110)
+++ new_cytoscape_website/bugreport/bugreportview.php 2013-02-07 23:37:25 UTC
(rev 31111)
@@ -6,7 +6,7 @@
$bugid = null;
if (isset ($_GET['bugid'])) {
- $bugid = ($_GET['bugid']);
+ $bugid = mysql_real_escape_string(($_GET['bugid']));
}
else {
exit("BugID unknow!");
--
You received this message because you are subscribed to the Google Groups
"cytoscape-cvs" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/cytoscape-cvs?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.