Index: mythplugins/mythweb/video_edit.php
===================================================================
RCS file: /var/lib/mythcvs/mythplugins/mythweb/video_edit.php,v
retrieving revision 1.3
diff -u -r1.3 video_edit.php
--- mythplugins/mythweb/video_edit.php	27 Feb 2005 22:39:29 -0000	1.3
+++ mythplugins/mythweb/video_edit.php	3 Jun 2005 05:21:31 -0000
@@ -31,6 +31,10 @@
 //check to see if the form has been submitted
 if (isset($_POST['submit'])) {
 
+			// Add escape character before single quotes in Title and Plot
+			$_POST['title'] = addcslashes($_POST['title'], "'");
+			$_POST['plot'] = addcslashes($_POST['plot'], "'");
+
       //insert data into database
       mysql_query("UPDATE videometadata SET
                    title='{$_POST['title']}',director='{$_POST['director']}',plot='{$_POST['plot']}',category='{$_POST['category']}',rating='{$_POST['rating']}',inetref='{$_POST['inetref']}',year='{$_POST['year']}',userrating='{$_POST['userrating']}',length='{$_POST['length']}' WHERE intid='{$_POST['intid']}'");
