summaryrefslogtreecommitdiff
path: root/includes
diff options
context:
space:
mode:
authorMichael Tänzer <neo@nhng.de>2013-08-24 17:04:44 +0200
committerMichael Tänzer <neo@nhng.de>2013-08-24 17:04:44 +0200
commitc34d0d386d2efb408cdc2dbd512a67ca259abea3 (patch)
treec55d8f57521066371b11cb4c7b21a7f03c281d9e /includes
parentf543973bfaa3ed1c393e4b1df022511b5c11e795 (diff)
parentff8e88c54bcbfad0084834f82b798b8a3f35817d (diff)
downloadcacert-devel-c34d0d386d2efb408cdc2dbd512a67ca259abea3.tar.gz
cacert-devel-c34d0d386d2efb408cdc2dbd512a67ca259abea3.tar.xz
cacert-devel-c34d0d386d2efb408cdc2dbd512a67ca259abea3.zip
Merge branch 'bug-1137' into merge-bug-1177-893-1136-1123-1137
Diffstat (limited to 'includes')
-rw-r--r--includes/notary.inc.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/notary.inc.php b/includes/notary.inc.php
index 7db597b..571d73b 100644
--- a/includes/notary.inc.php
+++ b/includes/notary.inc.php
@@ -635,7 +635,7 @@
function write_user_agreement($memid, $document, $method, $comment, $active=1, $secmemid=0){
// write a new record to the table user_agreement
$query="insert into `user_agreements` set `memid`=".intval($memid).", `secmemid`=".intval($secmemid).
- ",`document`='".$document."',`date`=NOW(), `active`=".intval($active).",`method`='".$method."',`comment`='".$comment."'" ;
+ ",`document`='".mysql_real_escape_string($document)."',`date`=NOW(), `active`=".intval($active).",`method`='".mysql_real_escape_string($method)."',`comment`='".mysql_real_escape_string($comment)."'" ;
$res = mysql_query($query);
}