From 7d11e1b1b5196d9ae8bf5a7f2f8fc04db31a8886 Mon Sep 17 00:00:00 2001 From: markleeds Date: Sun, 15 Mar 2009 19:23:54 +0000 Subject: [PATCH] Made to work with or without magic quotes on. --- interface/forms/CAMOS/ajax_save.php | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/interface/forms/CAMOS/ajax_save.php b/interface/forms/CAMOS/ajax_save.php index 2169df45c..a8a76a276 100755 --- a/interface/forms/CAMOS/ajax_save.php +++ b/interface/forms/CAMOS/ajax_save.php @@ -7,11 +7,16 @@ include_once("../../../library/sql.inc"); include_once("content_parser.php"); $field_names = array('category' => $_POST['category'], 'subcategory' => $_POST['subcategory'], 'item' => $_POST['item'], 'content' => $_POST['content']); +if(get_magic_quotes_gpc()) { + foreach ($field_names as $k => $var) { + $field_names[$k] = stripslashes($var); + } +} +foreach ($field_names as $k => $var) { + $field_names[$k] = mysql_real_escape_string($var); +} $camos_array = array(); process_commands($field_names['content'],$camos_array); -//foreach ($field_names as $k => $var) { -// $field_names[$k] = mysql_real_escape_string($var); -//} $CAMOS_form_name = "CAMOS-".$field_names['category'].'-'.$field_names['subcategory'].'-'.$field_names['item']; -- 2.11.4.GIT