bug 2992 fixed: escape all file names before searching them as duplicates in batch manager.

git-svn-id: http://piwigo.org/svn/branches/2.5@25223 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-07-21 09:03:38 +02:00 · 2013-10-29 22:37:45 +00:00
parent 4f7546267b
commit df56834db4
1 changed files with 1 additions and 1 deletions
@@ -268,7 +268,7 @@ SELECT file
    $query = '
 SELECT id
  FROM '.IMAGES_TABLE.'
-  WHERE file IN (\''.implode("','", $duplicate_files).'\')
+  WHERE file IN (\''.implode("','", array_map('pwg_db_real_escape_string', $duplicate_files)).'\')
 ;';

    array_push(