Author Topic: Error in mysql_real_escape_string  (Read 1348 times)

apmuthu

  • Freshman
  • *
  • Posts: 28
    • View Profile
Error in mysql_real_escape_string
« on: December 27, 2012, 06:38:20 AM »
Since there is no db connection in scope and the title field is not editable,
Line 805 in application/controllers/AdministrationController.class.php
         $title = (mysql_real_escape_string($tab['title']);
should be
         $title = trim($tab['title']) ;

Fix needs to be done for v2.2.1 and v2.2.2
« Last Edit: December 30, 2012, 07:25:48 AM by apmuthu »

SandJ

  • Newbie
  • *
  • Posts: 2
    • View Profile
    • Email
Re: Error in mysql_real_escape_string
« Reply #1 on: February 17, 2018, 09:41:50 AM »
I think that should say line 850, not line 805.

 

anything