bitPickups/friendica_2020-09-1_sharedHosting
1
0
Fork 0
Code Pull requests Activity

Alternate solution for pull request 3124

Browse source
This commit is contained in:
Michael 2017-01-28 12:19:04 +00:00
commit ea22828d37
5 changed files with 49 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

6
mod/dfrn_request.php
View file

@ -145,9 +145,7 @@ function dfrn_request_post(App $a) {
$photo = $parms["photo"];
// Escape the entire array
dbesc_array($parms);
dbm::esc_array($parms);
/*
* Create a contact record on our site for the other person
@ -547,7 +545,7 @@ function dfrn_request_post(App $a) {
$parms['issued-id'] = $issued_id;
$photo = $parms["photo"];
dbesc_array($parms);
dbm::esc_array($parms);
$r = q("INSERT INTO `contact` ( `uid`, `created`, `url`, `nurl`, `addr`, `name`, `nick`, `issued-id`, `photo`, `site-pubkey`,
`request`, `confirm`, `notify`, `poll`, `poco`, `network`, `blocked`, `pending` )
VALUES ( %d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %d, %d )",

8
mod/profiles.php
View file

@ -103,13 +103,13 @@ function profiles_init(App $a) {
$r1[0]['net-publish'] = 0;
$r1[0]['profile-name'] = dbesc($name);
dbesc_array($r1[0]);
dbm::esc_array($r1[0], true);
$r2 = dbq("INSERT INTO `profile` (`"
. implode("`, `", array_keys($r1[0]))
. "`) VALUES ('"
. implode("', '", array_values($r1[0]))
. "')" );
. "`) VALUES ("
. implode(", ", array_values($r1[0]))
. ")" );
$r3 = q("SELECT `id` FROM `profile` WHERE `uid` = %d AND `profile-name` = '%s' LIMIT 1",
intval(local_user()),