diff options
| author | Benny Baumann <BenBE@geshi.org> | 2013-06-11 22:33:34 +0200 |
|---|---|---|
| committer | Benny Baumann <BenBE@geshi.org> | 2013-06-11 22:33:34 +0200 |
| commit | 216271b2501cba5ac2724c56588fa62c725d1d69 (patch) | |
| tree | 92ac053ba899c2195f411eff5bd8d01cb869c337 /tverify/index.php | |
| parent | 0913b852c9e7a335cc2700f6f7d573565218c9dc (diff) | |
| parent | f0318d79dbc69e444fee4c085cdb3ee152318e1c (diff) | |
| download | cacert-devel-216271b2501cba5ac2724c56588fa62c725d1d69.tar.gz cacert-devel-216271b2501cba5ac2724c56588fa62c725d1d69.tar.xz cacert-devel-216271b2501cba5ac2724c56588fa62c725d1d69.zip | |
Merge branch 'bug-1162' into testserver-stable
Conflicts:
www/wot.php
Diffstat (limited to 'tverify/index.php')
| -rw-r--r-- | tverify/index.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/tverify/index.php b/tverify/index.php index 8976341..d3a0fd5 100644 --- a/tverify/index.php +++ b/tverify/index.php @@ -49,10 +49,10 @@ if($id == 1) { - $email = mysql_escape_string(trim($_REQUEST["email"])); - $password = mysql_escape_string(stripslashes(trim($_REQUEST["pword"]))); - $URL = mysql_escape_string(trim($_REQUEST["notaryURL"])); - $CN = mysql_escape_string($_SESSION['_config']['CN']); + $email = mysql_real_escape_string(trim($_REQUEST["email"])); + $password = mysql_real_escape_string(stripslashes(trim($_REQUEST["pword"]))); + $URL = mysql_real_escape_string(trim($_REQUEST["notaryURL"])); + $CN = mysql_real_escape_string($_SESSION['_config']['CN']); $memid = intval($_SESSION['_config']['uid']); $user = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='$memid'")); $tmp = mysql_fetch_assoc(mysql_query("select sum(`points`) as `points` from `notary` where `to`='$memid'")); @@ -99,7 +99,7 @@ if($nofile == 0) { $filename = $photoid['tmp_name']; - $newfile = mysql_escape_string('/www/photoid/'.$tverify.".".$ext); + $newfile = mysql_real_escape_string('/www/photoid/'.$tverify.".".$ext); move_uploaded_file($filename, $newfile); $query = "update `tverify` set `photoid`='$newfile' where `id`='$tverify'"; mysql_query($query); |