friendica/Mistpark
2
0
Fork 0
Code Releases Activity

missed escape on email receive

Browse source
This commit is contained in:
Mike Macgirvin 2010-08-13 05:59:59 -07:00
parent e9a0d07f3a
commit 2ee1b00c9c
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
mod/dfrn_notify.php
View file

@ -68,6 +68,7 @@ function dfrn_notify_post(&$a) {
$msg['parent-uri'] = notags(unxmlify($base['in-reply-to'][0]['data'])); $msg['parent-uri'] = notags(unxmlify($base['in-reply-to'][0]['data']));
$msg['created'] = datetime_convert(notags(unxmlify('UTC','UTC',$base['sentdate'][0]['data']))); $msg['created'] = datetime_convert(notags(unxmlify('UTC','UTC',$base['sentdate'][0]['data'])));
dbesc_array($msg);
$r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg)) $r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg))
. "`) VALUES ('" . implode("', '", array_values($msg)) . "')" ); . "`) VALUES ('" . implode("', '", array_values($msg)) . "')" );