From 4ea0acb65ea03d49ca879a1f988aa16b3e424ffb Mon Sep 17 00:00:00 2001 From: David Anderson Date: Sun, 17 Feb 2008 16:12:03 +0000 Subject: [PATCH] - web: single quotes in team name HTML didn't work because of magic quotes (need stripslashes()). svn path=/trunk/boinc/; revision=14754 --- checkin_notes | 7 ++++++- html/user/team_edit_action.php | 2 ++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/checkin_notes b/checkin_notes index cd9f3f5af8..90b769969c 100644 --- a/checkin_notes +++ b/checkin_notes @@ -1432,4 +1432,9 @@ Rom Feb 15 2008 boinc_cli_curl.vcproj - \ No newline at end of file +David Feb 17 2008 + - web: single quotes in team name HTML didn't work + because of magic quotes (need stripslashes()). + + html/user/ + team_edit_action.php diff --git a/html/user/team_edit_action.php b/html/user/team_edit_action.php index 26ba7644a6..2a5da9f555 100644 --- a/html/user/team_edit_action.php +++ b/html/user/team_edit_action.php @@ -19,7 +19,9 @@ if ($x) { } $team_name = process_user_text(strip_tags(post_str("name"))); $team_name_lc = strtolower($team_name); + $tnh = post_str("name_html", true); +if (get_magic_quotes_gpc()) $tnh = stripslashes($tnh); $team_name_html = sanitize_html($tnh); $team_name_html = process_user_text($team_name_html);