SF.net SVN: jgbbs: [90] jgbbs3/trunk/search.asp

[<ha...@us...>]

Revision: 90
          http://jgbbs.svn.sourceforge.net/jgbbs/?rev=90&view=rev
Author:   hanru
Date:     2007-04-27 06:39:23 -0700 (Fri, 27 Apr 2007)

Log Message:
-----------
the second part of sanitize querying string

Modified Paths:
--------------
    jgbbs3/trunk/search.asp

Modified: jgbbs3/trunk/search.asp
===================================================================
--- jgbbs3/trunk/search.asp	2007-04-27 12:20:03 UTC (rev 89)
+++ jgbbs3/trunk/search.asp	2007-04-27 13:39:23 UTC (rev 90)
@@ -161,6 +161,7 @@
     bid = Request.QueryString("bid")
     
     ' Sanitize this string, hopefully fix a SQL injection exploit
+    title = StripQuotes(title)
     author = StripQuotes(author)
     
     ' Check parameters


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.