From ed593ac5f353bc2bd453167a18ed6bd55b8394e3 Mon Sep 17 00:00:00 2001 From: Rodolphe Quiedeville Date: Thu, 6 Apr 2006 12:24:14 +0000 Subject: [PATCH] Bugfix --- htdocs/telephonie/ligne/commentaires.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/telephonie/ligne/commentaires.php b/htdocs/telephonie/ligne/commentaires.php index 475d9f782f0..718a321a479 100644 --- a/htdocs/telephonie/ligne/commentaires.php +++ b/htdocs/telephonie/ligne/commentaires.php @@ -54,7 +54,7 @@ if ($_GET["id"]) { $sql = "INSERT INTO ".MAIN_DB_PREFIX."telephonie_societe_ligne_comments"; $sql .= " (fk_ligne, fk_user, commentaire,datec)"; - $sql .= " VALUES ('".$ligne->id."','".$user->id."','".$_POST["comment"]."',now());"; + $sql .= " VALUES ('".$ligne->id."','".$user->id."','".addslashes($_POST["comment"])."',now());"; $db->query($sql); }