[Phpbb-checkins] CVS: phpBB2/admin admin_words.php,1.6,1.7

[Paul S. O. <ps...@us...>]

Update of /cvsroot/phpbb/phpBB2/admin
In directory usw-pr-cvs1:/tmp/cvs-serv17208/admin

Modified Files:
	admin_words.php 
Log Message:
For Christmas I'd like a \', no damn it, that's not what I'd like ...

Index: admin_words.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/admin/admin_words.php,v
retrieving revision 1.6
retrieving revision 1.7
diff -C2 -r1.6 -r1.7
*** admin_words.php	2001/11/24 01:51:35	1.6
--- admin_words.php	2001/12/24 13:35:09	1.7
***************
*** 123,127 ****
  		{
  			$sql = "UPDATE " . WORDS_TABLE . " 
! 				SET word = '$word', replacement = '$replacement' 
  				WHERE word_id = $word_id";
  			$message = $lang['Word_updated'];
--- 123,127 ----
  		{
  			$sql = "UPDATE " . WORDS_TABLE . " 
! 				SET word = '" . str_replace("\'", "''", $word) . "', replacement = '" . str_replace("\'", "''", $replacement) . "' 
  				WHERE word_id = $word_id";
  			$message = $lang['Word_updated'];
***************
*** 130,134 ****
  		{
  			$sql = "INSERT INTO " . WORDS_TABLE . " (word, replacement) 
! 				VALUES ('$word', '$replacement')";
  			$message = $lang['Word_added'];
  		}
--- 130,134 ----
  		{
  			$sql = "INSERT INTO " . WORDS_TABLE . " (word, replacement) 
! 				VALUES ('" . str_replace("\'", "''", $word) . "', '" . str_replace("\'", "''", $replacement) . "')";
  			$message = $lang['Word_added'];
  		}