Skip to content
Snippets Groups Projects
Commit 79502657 authored by Eric Rasmussen's avatar Eric Rasmussen
Browse files

removed patch that altered the sanitise_string function. replaced with patch...

removed patch that altered the sanitise_string function.  replaced with patch that does strip_tags to the name field when it is altered
parent 854247f7
Branches
No related tags found
No related merge requests found
Index: database.php
===================================================================
--- database.php (revision 3939)
+++ database.php (working copy)
@@ -612,6 +612,10 @@
* @return string Sanitised string
*/
function sanitise_string($string) {
+ while($string != html_entity_decode($string)) {
+ $string = html_entity_decode($string);
+ }
+ $string = strip_tags($string);
return mysql_real_escape_string(trim($string));
}
Index: name.php
===================================================================
--- name.php (revision 3940)
+++ name.php (working copy)
@@ -13,7 +13,7 @@
gatekeeper();
- $name = get_input('name');
+ $name = strip_tags(get_input('name'));
$user_id = get_input('guid');
$user = "";
......@@ -4,10 +4,10 @@ mkdir elgg_data &> /dev/null
#Do patches
patch -p0 -s -N -r tmp.rej < patches/relationship_get_set_public.diff > /dev/null
patch -p0 -s -N -d elgg -r tmp.rej < patches/lowercase_post.diff > /dev/null
patch -p0 -s -N -d elgg/engine/lib -r tmp.rej < patches/database_strip_html.diff > /dev/null
patch -p0 -s -N -d elgg/mod/groups -r tmp.rej < patches/add_closing_labels.diff > /dev/null
patch -p0 -s -N -r tmp.rej < patches/relationship_get_set_public.diff > /dev/null
patch -p0 -s -N -d elgg -r tmp.rej < patches/lowercase_post.diff > /dev/null
patch -p0 -s -N -d elgg/actions/user -r tmp.rej < patches/strip_tags_name_field.diff > /dev/null
patch -p0 -s -N -d elgg/mod/groups -r tmp.rej < patches/add_closing_labels.diff > /dev/null
rm tmp.rej &> /dev/null
echo 'Setup successful'
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment