From b2c5c04c6a7778a11b285592fad04fe1574eef28 Mon Sep 17 00:00:00 2001
From: patdenice <patdenice@piwigo.org>
Date: Tue, 18 Sep 2007 17:53:05 +0000
Subject: [PATCH] 0000734: bug on tags edition

git-svn-id: http://piwigo.org/svn/trunk@2093 68402e56-0260-453c-a942-63ccdbb3a9ee
---
 admin/tags.php | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/admin/tags.php b/admin/tags.php
index 777281761..b3ef994b4 100644
--- a/admin/tags.php
+++ b/admin/tags.php
@@ -63,11 +63,11 @@ SELECT id, name
   {
     if (function_exists('mysql_real_escape_string'))
     {
-      $tag_name = mysql_real_escape_string($_POST['tag_name-'.$tag_id]);
+      $tag_name = mysql_real_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
     }
     else
     {
-      $tag_name = mysql_escape_string($_POST['tag_name-'.$tag_id]);
+      $tag_name = mysql_escape_string(stripslashes($_POST['tag_name-'.$tag_id]));
     }
 
     if ($tag_name != $current_name_of[$tag_id])
@@ -148,7 +148,14 @@ DELETE
 
 if (isset($_POST['add']) and !empty($_POST['add_tag']) and !is_adviser())
 {
-  $tag_name = $_POST['add_tag'];
+  if (function_exists('mysql_real_escape_string'))
+  {
+    $tag_name = mysql_real_escape_string(stripslashes($_POST['add_tag']));
+  }
+  else
+  {
+    $tag_name = mysql_escape_string(stripslashes($_POST['add_tag']));
+  }
 
   // does the tag already exists?
   $query = '