servers
/
ttrss
mirror of https://tt-rss.org/git/tt-rss.git
1
0
Fork 0
Code Issues Releases Wiki Activity

db_escape_string: remove tags by default (refs #323)

This commit is contained in:
Andrew Dolgov 2011-02-19 16:55:36 +03:00
parent 6853521166
commit c7a8deacd9
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
db.php
View File

@ -41,7 +41,9 @@ function db_connect($host, $user, $pass, $db) {
} }
} }
function db_escape_string($s) { function db_escape_string($s, $strip_tags = true) {
if ($strip_tags) $s = strip_tags($s);
if (DB_TYPE == "pgsql") { if (DB_TYPE == "pgsql") {
return pg_escape_string($s); return pg_escape_string($s);
} else { } else {

2
functions.php
View File

@ -954,7 +954,7 @@
$result = db_query($link, "SELECT id FROM ttrss_entries $result = db_query($link, "SELECT id FROM ttrss_entries
WHERE guid = '$entry_guid'"); WHERE guid = '$entry_guid'");
$entry_content = db_escape_string($entry_content); $entry_content = db_escape_string($entry_content, true);
$content_hash = "SHA1:" . sha1(strip_tags($entry_content)); $content_hash = "SHA1:" . sha1(strip_tags($entry_content));