fixed #1701 escaped " ' " for album creation and edit

This commit is contained in:
Matthieu Leproux
2022-09-26 14:47:42 +02:00
parent 4d81d28eca
commit d0e32547db
2 changed files with 5 additions and 3 deletions
+2 -1
View File
@@ -647,7 +647,8 @@ function ws_categories_add($params, &$service)
// TODO do not strip tags if pwg_token is provided (and valid)
$options['comment'] = strip_tags($params['comment']);
}
$params['name'] = pwg_db_real_escape_string($params['name']);
$creation_output = create_virtual_category(
strip_tags($params['name']), // TODO do not strip tags if pwg_token is provided (and valid)
$params['parent'],