diff options
| author | swiergot <swiergot> | 2007-08-16 02:25:04 +0200 |
|---|---|---|
| committer | swiergot <swiergot> | 2007-08-16 02:25:04 +0200 |
| commit | 14df0d4b8d95f4c0240c0bd98c6ce9b74706e3ca (patch) | |
| tree | 6aa8f1250ffe26ffe980d5aa77205586a236dfb0 /web/html/account.php | |
| parent | fe84915465ac941356f50cc07925e3fd42615955 (diff) | |
| download | aur-14df0d4b8d95f4c0240c0bd98c6ce9b74706e3ca.tar.gz aur-14df0d4b8d95f4c0240c0bd98c6ce9b74706e3ca.tar.xz | |
- Applied a patch from Loui to fix session removal.
- Replaced all occurences of mysql_escape_string()
with mysql_real_escape_string().
Diffstat (limited to 'web/html/account.php')
| -rw-r--r-- | web/html/account.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/web/html/account.php b/web/html/account.php index eeb1e407..fba90dd6 100644 --- a/web/html/account.php +++ b/web/html/account.php @@ -106,7 +106,7 @@ if (isset($_COOKIE["AURSID"])) { $q.= "WHERE AccountTypes.ID = Users.AccountTypeID "; $q.= "AND Users.ID = Sessions.UsersID "; $q.= "AND Sessions.SessionID = '"; - $q.= mysql_escape_string($_COOKIE["AURSID"])."'"; + $q.= mysql_real_escape_string($_COOKIE["AURSID"])."'"; $result = db_query($q, $dbh); if (!mysql_num_rows($result)) { print __("Could not retrieve information for the specified user."); |