servers
/
ttrss
mirror of https://tt-rss.org/git/tt-rss.git
1
0
Fork 0
Code Issues Releases Wiki Activity

fix customize CSS dialog disappearing newlines

This commit is contained in:
Andrew Dolgov 2012-02-13 12:46:20 +04:00
parent 86edc737f4
commit 0380cfa9ee
2 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
classes/rpc.php
View File

@ -212,10 +212,9 @@ class RPC extends Protected_Handler {
function setpref() {
$value = str_replace("\n", "<br/>", $_REQUEST['value']);
$key = db_escape_string($_REQUEST["key"]);
$value = db_escape_string($value);
// set_pref escapes input, so no need to double escape it here
set_pref($this->link, $key, $value);
set_pref($this->link, $key, $value, $_SESSION['uid'], false);
print json_encode(array("param" =>$key, "value" => $value));
}

4
include/db-prefs.php
View File

@ -79,9 +79,9 @@
}
}
function set_pref($link, $pref_name, $value, $user_id = false) {
function set_pref($link, $pref_name, $value, $user_id = false, $strip_tags = true) {
$pref_name = db_escape_string($pref_name);
$value = db_escape_string($value);
$value = db_escape_string($value, $strip_tags);
if (!$user_id) {
$user_id = $_SESSION["uid"];