CVSROOT: /sources/phpgroupware Module name: ged Changes by: Pascal Vilarem <maat> 07/10/19 12:37:16
Modified files: inc : class.ged_dm.inc.php Log message: fix : no more ugly crash when there are quotes in file names CVSWeb URLs: http://cvs.savannah.gnu.org/viewcvs/ged/inc/class.ged_dm.inc.php?cvsroot=phpgroupware&r1=1.48&r2=1.49 Patches: Index: class.ged_dm.inc.php =================================================================== RCS file: /sources/phpgroupware/ged/inc/class.ged_dm.inc.php,v retrieving revision 1.48 retrieving revision 1.49 diff -u -b -r1.48 -r1.49 --- class.ged_dm.inc.php 28 Sep 2007 17:00:06 -0000 1.48 +++ class.ged_dm.inc.php 19 Oct 2007 12:37:16 -0000 1.49 @@ -184,7 +184,7 @@ $major=(int)$new_file['major']; $minor=(int)$new_file['minor']; - $sql1=sprintf($sql_model1, $this->tables['versions'], $new_file['file_size'], $new_file['file_name'], $candidate_name, $extension, $GLOBALS['phpgw_info']['user']['account_id'], time(), 'working', $new_element_id, lang("First version"), $major, $minor); + $sql1=sprintf($sql_model1, $this->tables['versions'], $new_file['file_size'], addslashes($new_file['file_name']), addslashes($candidate_name), $extension, $GLOBALS['phpgw_info']['user']['account_id'], time(), 'working', $new_element_id, lang("First version"), $major, $minor); //print ("<br/>".$sql1); @@ -475,7 +475,7 @@ $sql_model1="INSERT INTO %s ( size, file_name, stored_name, file_extension, creator_id, creation_date, status, element_id, description, major, minor ) VALUES "; $sql_model1.=" ( %d, '%s', '%s', '%s', %d, %d, '%s', %d, '%s', %d, %d ) "; - $sql1=sprintf($sql_model1, $this->tables['versions'], $new_version['file_size'], $new_version['file_name'], $candidate_name, $extension, $GLOBALS['phpgw_info']['user']['account_id'], time(), 'working', $new_version['element_id'], $this->cleanstr($new_version['description']), $major, $minor); + $sql1=sprintf($sql_model1, $this->tables['versions'], $new_version['file_size'], addslashes($new_version['file_name']), addslashes($candidate_name), $extension, $GLOBALS['phpgw_info']['user']['account_id'], time(), 'working', $new_version['element_id'], $this->cleanstr($new_version['description']), $major, $minor); //print ("<br/>".$sql1); @@ -2392,6 +2392,13 @@ return ( $result ); } + function set_version_status($version_id, $next_status) + { + $sql="UPDATE ged_versions set status='".$next_status."' WHERE version_id=".$version_id; + $this->db->query($sql, __LINE__, __FILE__); + $this->db->unlock(); + } + // relations management function list_version_relations_out ( $version_id ) _______________________________________________ phpGroupWare-cvs mailing list phpGroupWare-cvs@gnu.org http://lists.gnu.org/mailman/listinfo/phpgroupware-cvs