mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-01-18 22:58:10 +01:00
Code Issues Releases Wiki Activity

fixed: slashing attachment comments (hopefully)

Browse Source 
changed header.


git-svn-id: file:///svn/phpbb/trunk@4458 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Meik Sievertsen 2003-08-29 18:06:56 +00:00
parent 563feb4d39
commit 9f7db6a21c
6 changed files with 64 additions and 100 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
phpBB/adm/admin_attachments.php
View File

@ -1,23 +1,15 @@
<?php <?php
/*************************************************************************** // -------------------------------------------------------------
* admin_attachments.php //
* ------------------- // $Id$
* begin : Sunday, Apr 20, 2003 //
* copyright : (C) 2003 The phpBB Group // FILENAME : admin_attachments.php
* email : support@phpbb.com // STARTED : Sun Apr 20, 2003
* // COPYRIGHT : © 2001, 2003 phpBB Group
* $Id$ // WWW : http://www.phpbb.com/
* // LICENCE : GPL vs2.0 [ see /docs/COPYING ]
***************************************************************************/ //
// -------------------------------------------------------------
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
if (!empty($setmodules)) if (!empty($setmodules))
{ {
@ -138,8 +130,6 @@ switch ($mode)
$l_title = 'EXTENSION_GROUPS_TITLE'; $l_title = 'EXTENSION_GROUPS_TITLE';
} }
// Temporary Language Variables
adm_page_header($user->lang[$l_title]); adm_page_header($user->lang[$l_title]);
// Search Imagick // Search Imagick

31
phpBB/download.php
View File

@ -1,24 +1,15 @@
<?php <?php
/*************************************************************************** // -------------------------------------------------------------
* download.php //
* ------------------- // $Id$
* begin : Thu, Apr 10, 2003 //
* copyright : (C) 2003 The phpBB Group // FILENAME : download.php
* email : support@phpbb.com // STARTED : Thu Apr 10, 2003
* // COPYRIGHT : © 2001, 2003 phpBB Group
* $Id$ // WWW : http://www.phpbb.com/
* // LICENCE : GPL vs2.0 [ see /docs/COPYING ]
***************************************************************************/ //
// -------------------------------------------------------------
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
if ( defined('IN_PHPBB') ) if ( defined('IN_PHPBB') )
{ {

31
phpBB/includes/functions_display.php
View File

@ -1,23 +1,15 @@
<?php <?php
/*************************************************************************** // -------------------------------------------------------------
* functions_display.php //
* ------------------ // $Id$
* begin : Saturday, Feb 13, 2001 //
* copyright : (C) 2001 The phpBB Group // FILENAME : functions_display.php
* email : support@phpbb.com // STARTED : Thu Nov 07, 2002
* // COPYRIGHT : © 2001, 2003 phpBB Group
* $Id$ // WWW : http://www.phpbb.com/
* // LICENCE : GPL vs2.0 [ see /docs/COPYING ]
***************************************************************************/ //
// -------------------------------------------------------------
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
function display_forums($root_data = '', $display_moderators = TRUE) function display_forums($root_data = '', $display_moderators = TRUE)
{ {
@ -332,6 +324,7 @@ function display_attachments($attachment_data, &$update_count, $force_physical =
$display_name = $attachment['real_filename']; $display_name = $attachment['real_filename'];
$comment = stripslashes(trim(str_replace("\n", '<br />', $attachment['comment']))); $comment = stripslashes(trim(str_replace("\n", '<br />', $attachment['comment'])));
$comment = htmlspecialchars(str_replace("\\'", "'", $comment));
$denied = FALSE; $denied = FALSE;

30
phpBB/includes/functions_posting.php
View File

@ -1,23 +1,15 @@
<?php <?php
/*************************************************************************** // -------------------------------------------------------------
* functions_posting.php //
* ------------------- // $Id$
* begin : Saturday, Feb 13, 2001 //
* copyright : (C) 2001 The phpBB Group // FILENAME : functions_posting.php
* email : support@phpbb.com // STARTED : Sun Jul 14, 2002
* // COPYRIGHT : © 2001, 2003 phpBB Group
* $Id$ // WWW : http://www.phpbb.com/
* // LICENCE : GPL vs2.0 [ see /docs/COPYING ]
***************************************************************************/ //
// -------------------------------------------------------------
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
// Fill smiley templates (or just the variables) with smileys, either in a window or inline // Fill smiley templates (or just the variables) with smileys, either in a window or inline
function generate_smilies($mode) function generate_smilies($mode)

2
phpBB/includes/message_parser.php
View File

@ -4,7 +4,7 @@
// $Id$ // $Id$
// //
// FILENAME : message_parser.php // FILENAME : message_parser.php
// STARTED : Sat Feb 13, 2001 // STARTED : Fri Feb 28, 2003
// COPYRIGHT : © 2003 phpBB Group // COPYRIGHT : © 2003 phpBB Group
// WWW : http://www.phpbb.com/ // WWW : http://www.phpbb.com/
// LICENCE : GPL vs2.0 [ see /docs/COPYING ] // LICENCE : GPL vs2.0 [ see /docs/COPYING ]

38
phpBB/posting.php
View File

@ -1,23 +1,15 @@
<?php <?php
/*************************************************************************** // -------------------------------------------------------------
* posting.php //
* ------------------- // $Id$
* begin : Saturday, Feb 13, 2001 //
* copyright : (C) 2001 The phpBB Group // FILENAME : posting.php
* email : support@phpbb.com // STARTED : Sat Feb 17, 2001
* // COPYRIGHT : © 2001, 2003 phpBB Group
* $Id$ // WWW : http://www.phpbb.com/
* // LICENCE : GPL vs2.0 [ see /docs/COPYING ]
***************************************************************************/ //
// -------------------------------------------------------------
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
define('IN_PHPBB', true); define('IN_PHPBB', true);
$phpbb_root_path = './'; $phpbb_root_path = './';
@ -228,7 +220,13 @@ if ($sql != '')
// Get Attachment Data // Get Attachment Data
$message_parser->attachment_data = (isset($_POST['attachment_data'])) ? $_POST['attachment_data'] : array(); $message_parser->attachment_data = (isset($_POST['attachment_data'])) ? $_POST['attachment_data'] : array();
// Make sure we do not add slashes twice...
foreach ($message_parser->attachment_data as $pos => $var)
{
$message_parser->attachment_data[$pos]['comment'] = stripslashes($message_parser->attachment_data[$pos]['comment']);
}
if ($post_attachment && !$submit && !$refresh && !$preview && $mode == 'edit') if ($post_attachment && !$submit && !$refresh && !$preview && $mode == 'edit')
{ {
$sql = 'SELECT d.* $sql = 'SELECT d.*