Fix two problem with Feature 1026 :

use of $conf['user_fields']['username'] and $conf['user_fields']['id'] instead of username and id
escape comment content before editing it.

git-svn-id: http://piwigo.org/svn/trunk@3452 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
nikrou
2009-06-24 19:00:40 +00:00
parent 64c872a83e
commit ed7f7a574e
4 changed files with 11 additions and 9 deletions

View File

@@ -134,12 +134,13 @@ $template->assign(
$list = array();
$query = '
SELECT c.id, c.image_id, c.date, c.author, u.username, c.content, i.path, i.tn_ext
SELECT c.id, c.image_id, c.date, c.author, '.
$conf['user_fields']['username'].' AS username, c.content, i.path, i.tn_ext
FROM '.COMMENTS_TABLE.' AS c
INNER JOIN '.IMAGES_TABLE.' AS i
ON i.id = c.image_id
LEFT JOIN '.USERS_TABLE.' AS u
ON u.id = c.author_id
ON u.'.$conf['user_fields']['id'].' = c.author_id
WHERE validated = \'false\'
ORDER BY c.date DESC
;';