public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 18:55:55 +00:00
Code Issues Releases Wiki Activity

escape html characters in db_query() error output

Browse Source
This commit is contained in:
Andrew Dolgov
2005-10-16 09:52:44 +01:00
parent 571c7f235d
commit 8823cd590f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
db.php
View File

@@ -55,12 +55,14 @@ function db_query($link, $query) {
if (DB_TYPE == "pgsql") {
$result = pg_query($link, $query);
if (!$result) {
$query = htmlspecialchars($query); // just in case
die("Query <i>$query</i> failed: " . pg_last_error($link));
}
return $result;
} else if (DB_TYPE == "mysql") {
$result = mysql_query($query, $link);
if (!$result) {
$query = htmlspecialchars($query);
die("Query <i>$query</i> failed: " . mysql_error($link));
}
return $result;