0ct0pu5/wiby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add files via upload

Browse source
This commit is contained in:
wibyweb 2022-08-10 02:19:02 -04:00 • committed by GitHub
parent e04cd16b51
commit ce6685e33e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
html/feedback/index.php
View file

@ -47,14 +47,14 @@
exit();
}
$feedback = str_replace("\'", "\'\'", $_POST['feedback']); //single quotes must be handled correctly
$feedback = str_replace("\"", "\"\"", $feedback);//double quotes must be handled correctly
//$feedback = mysqli_real_escape_string($link, $_POST['feedback']);//doesn't read back properly
//$feedback = str_replace("\'", "\'\'", $_POST['feedback']); //single quotes must be handled correctly
//$feedback = str_replace("\"", "\"\"", $feedback);//double quotes must be handled correctly
$feedback = mysqli_real_escape_string($link, $_POST['feedback']);
$feedback = substr($feedback,0,8000); //don't allow user to post a longer string than 8k (also limited in form)
$sql = 'INSERT INTO feedback (message) VALUES ("'.$feedback.'")';
$sql = "INSERT INTO feedback (message) VALUES ('".$feedback."')";
if (!mysqli_query($link, $sql))