Escape posts titles in post history code

2014-01-05 13:30:45 +00:00
parent b930cc7b4a
commit 7986670917
1 changed files with 1 additions and 1 deletions
--- a/Sources/Post.php
+++ b/Sources/Post.php
@@ -1265,7 +1265,7 @@ function Post2()
 				'{$_REQUEST['msg']}',
 				'{$context['user']['id']}',
 				UNIX_TIMESTAMP(),
-				'{$oldSubject}',
+				'".mysql_real_escape_string($oldSubject)."',
 				'{$oldBody}'
 				)", __FILE__, __LINE__);