From dad3dbc2fec96508a812155dc0b18cf301e3cf0b Mon Sep 17 00:00:00 2001 From: Andre Lorbach Date: Mon, 7 Nov 2011 15:39:47 +0100 Subject: [PATCH] Fixed bug in verification routine of sources admin when backslashes were in any other variables --- src/admin/sources.php | 14 +++++++------- src/include/functions_config.php | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/src/admin/sources.php b/src/admin/sources.php index 9f521b8..4d05616 100644 --- a/src/admin/sources.php +++ b/src/admin/sources.php @@ -705,13 +705,13 @@ if ( isset($_POST['op']) ) // DB Params else if ( $tmpSource['SourceType'] == SOURCE_DB || $tmpSource['SourceType'] == SOURCE_PDO ) { - $tmpSource['DBType'] = $content['SourceDBType']; - $tmpSource['DBName'] = $content['SourceDBName']; - $tmpSource['DBTableType'] = $content['SourceDBTableType']; - $tmpSource['DBServer'] = $content['SourceDBServer']; - $tmpSource['DBTableName'] = $content['SourceDBTableName']; - $tmpSource['DBUser'] = $content['SourceDBUser']; - $tmpSource['DBPassword'] = $content['SourceDBPassword']; + $tmpSource['DBType'] = DB_StripSlahes($content['SourceDBType']); + $tmpSource['DBName'] = DB_StripSlahes($content['SourceDBName']); + $tmpSource['DBTableType'] = DB_StripSlahes($content['SourceDBTableType']); + $tmpSource['DBServer'] = DB_StripSlahes($content['SourceDBServer']); + $tmpSource['DBTableName'] = DB_StripSlahes($content['SourceDBTableName']); + $tmpSource['DBUser'] = DB_StripSlahes($content['SourceDBUser']); + $tmpSource['DBPassword'] = DB_StripSlahes($content['SourceDBPassword']); $tmpSource['DBEnableRowCounting'] = $content['SourceDBEnableRowCounting']; $tmpSource['DBRecordsPerQuery'] = $content['SourceDBRecordsPerQuery']; $tmpSource['userid'] = $content['userid']; diff --git a/src/include/functions_config.php b/src/include/functions_config.php index a845d06..3e2f68e 100644 --- a/src/include/functions_config.php +++ b/src/include/functions_config.php @@ -1,4 +1,4 @@ -