summary refs log tree commit diff stats
path: root/admin/editLink.php
diff options
context:
space:
mode:
authorStarla Insigna <starla4444@gmail.com>2010-12-11 14:05:05 -0500
committerStarla Insigna <starla4444@gmail.com>2010-12-11 14:05:05 -0500
commit74db7a24d9c2230b104979f4e4981c57ff73de71 (patch)
tree3059bb0a955a662cd9e04208eb6276071cea4c8a /admin/editLink.php
parent9efe4feaf5e19e51a18a229a6db36c5508e9faea (diff)
downloadfourisland-74db7a24d9c2230b104979f4e4981c57ff73de71.tar.gz
fourisland-74db7a24d9c2230b104979f4e4981c57ff73de71.tar.bz2
fourisland-74db7a24d9c2230b104979f4e4981c57ff73de71.zip
Made Four Island 2 a little more sane
I spent the last few hours sanitizing the database and fixing huge bugs in the code. Among the changes made were:
- "Theoretically related posts" have been removed due to the lack of FULLTEXT index support in InnoDB tables
- Removed tons of stripslashes() calls that were used to remove slashes from records before I realized (while doing all of this work) that magic_quotes_gpc was on for some reason. I mean, like, come on!
- Replaced all non-library uses of htmlentities() with htmlspecialchars(), which basically does the same thing except it doesn't mangle Unicode.
- Completely eradicated polls.
Note that this does mean that all database backups prior to December 11th 2010 are now incompatible with Four Island.
Diffstat (limited to 'admin/editLink.php')
-rwxr-xr-xadmin/editLink.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/admin/editLink.php b/admin/editLink.php index f3ba9cc..2bc86ab 100755 --- a/admin/editLink.php +++ b/admin/editLink.php
@@ -74,10 +74,10 @@ if (isset($_GET['submit']))
74 $template->adds_block('FLASH', array('TEXT' => 'Your link has been sucessfully edited.')); 74 $template->adds_block('FLASH', array('TEXT' => 'Your link has been sucessfully edited.'));
75 } 75 }
76 76
77 $template->add('TITLEVALUE', htmlentities($_POST['title'])); 77 $template->add('TITLEVALUE', htmlspecialchars($_POST['title']));
78 $template->add('URLVALUE', $_POST['url']); 78 $template->add('URLVALUE', $_POST['url']);
79} else { 79} else {
80 $template->add('TITLEVALUE', htmlentities($getlink3['title'])); 80 $template->add('TITLEVALUE', htmlspecialchars($getlink3['title']));
81 $template->add('URLVALUE', $getlink3['url']); 81 $template->add('URLVALUE', $getlink3['url']);
82} 82}
83 83