Escape all entries and edits into the db

Brought to you by: higgityfiggity, troutgirl

#2 Escape all entries and edits into the db

Status: open

Owner: nobody

Labels: None

Priority: 7

Updated: 2002-02-17

Created: 2002-02-17

Creator: Alexander Selkirk

Private: No

There are some profile edits (namely team) that don't
escape all the necessary fields before trying to
insert them into the db. This has to get fixed!

Discussion

Joyce Park - 2002-02-23

Logged In: YES
user_id=198484

On Webpipe we have magicquotes on. Shouldn't that take
care of it?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexander Selkirk - 2002-02-23

Logged In: YES
user_id=305120

Well it doesn't right now - any quotes in there mess up the
insert query on the various profile edit pages (useredit,
projectedit, teamedit, etc...)

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Escape all entries and edits into the db

Group

Searches

Help

#2 Escape all entries and edits into the db

Discussion