bug 2971: i.php should escape source location

git-svn-id: http://piwigo.org/svn/trunk@28198 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-06-01 20:04:51 +02:00 · 2014-04-16 05:13:10 +00:00
parent ac316cee71
commit d1ac6441e8
1 changed files with 1 additions and 1 deletions
@@ -468,7 +468,7 @@ if (strpos($page['src_location'], '/pwg_representative/')===false
    $query = '
 SELECT *
  FROM '.$prefixeTable.'images
-  WHERE path=\''.$page['src_location'].'\'
+  WHERE path=\''.addslashes($page['src_location']).'\'
 ;';

    if ( ($row=pwg_db_fetch_assoc(pwg_query($query))) )