From 5823f9fbabb610a487b5d50a1a81b33445cfb881 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 28 Dec 2010 09:11:49 +0300 Subject: fix USER_STYLESHEET for mysql (was broken because of CR escaping --- modules/backend-rpc.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'modules/backend-rpc.php') diff --git a/modules/backend-rpc.php b/modules/backend-rpc.php index 1447634bf..947dd5c50 100644 --- a/modules/backend-rpc.php +++ b/modules/backend-rpc.php @@ -143,8 +143,10 @@ if ($subop == "setpref") { header("Content-Type: text/plain"); + $value = str_replace("\n", "
", $_REQUEST['value']); + $key = db_escape_string($_REQUEST["key"]); - $value = db_escape_string($_REQUEST["value"]); + $value = db_escape_string($value); set_pref($link, $key, $value); -- cgit v1.2.3-54-g00ecf