Merge pull request #237 from fgtham/master

xbgmsharp · web-flow · commit fb9121bbce7e · 2023-10-12T15:10:35.000+02:00
Fix possible SQL injection
diff --git a/admin/admin_tag.php b/admin/admin_tag.php
@@ -204,7 +204,7 @@
 					$tag_ids = array();
 					foreach ($tag_names as $tag_name)
 					{
-						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".$tag_name) );
+						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".pwg_db_real_escape_string($tag_name)) );
 					}
 					/* Assign tags to image */
 					//print_r($tag_ids);

Original file line number	Diff line number	Diff line change
`@@ -204,7 +204,7 @@`
`204`	`204`	`$tag_ids = array();`
`205`	`205`	`foreach ($tag_names as $tag_name)`
`206`	`206`	`{`
`207`		`- array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".$tag_name) );`
	`207`	`+ array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".pwg_db_real_escape_string($tag_name)) );`
`208`	`208`	`}`
`209`	`209`	`/* Assign tags to image */`
`210`	`210`	`//print_r($tag_ids);`