mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-02 20:57:26 +02:00
Code Issues Releases Wiki Activity

Part of bugtracker #4153 - never allow HTML posting to admin log

Browse Source
This commit is contained in:
e107steved
2007-11-04 09:10:54 +00:00
parent 0131596d38
commit f4299021c2
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
e107_handlers/admin_log_class.php
View File

@@ -4,7 +4,7 @@
+ ----------------------------------------------------------------------------+ + ----------------------------------------------------------------------------+
| e107 website system | e107 website system
| |
| ?Steve Dunstan 2001-2002 | <EFBFBD>Steve Dunstan 2001-2002
| http://e107.org | http://e107.org
| jalist@e107.org | jalist@e107.org
| |
@@ -12,9 +12,9 @@
| GNU General Public License (http://gnu.org). | GNU General Public License (http://gnu.org).
| |
| $Source: /cvs_backup/e107_0.8/e107_handlers/admin_log_class.php,v $ | $Source: /cvs_backup/e107_0.8/e107_handlers/admin_log_class.php,v $
| $Revision: 1.2 $ | $Revision: 1.3 $
| $Date: 2007-06-21 16:55:10 $ | $Date: 2007-11-04 09:10:54 $
| $Author: sweetas $ | $Author: e107steved $
+----------------------------------------------------------------------------+ +----------------------------------------------------------------------------+
*/ */
@@ -89,9 +89,9 @@ class e_admin_log {
function log_event ($event_title, $event_detail, $event_type = E_LOG_INFORMATIVE) { function log_event ($event_title, $event_detail, $event_type = E_LOG_INFORMATIVE) {
global $e107, $sql, $tp; global $e107, $sql, $tp;
if($event_type >= $this->_options['log_level']) { if($event_type >= $this->_options['log_level']) {
$event_title = $tp -> toDB($event_title, true); $event_title = $tp -> toDB($event_title, true,false,'no_html');
$event_detail = $tp -> toDB($event_detail, true); $event_detail = $tp -> toDB($event_detail, true,false,'no_html');
$event_type = $tp -> toDB($event_type, true); $event_type = $tp -> toDB($event_type, true,false,'no_html');
$time_stamp = time(); $time_stamp = time();
$uid = (USERID !== FALSE) ? USERID : '0'; $uid = (USERID !== FALSE) ? USERID : '0';
$ip = $e107->getip(); $ip = $e107->getip();