Zeile 83 | Zeile 83 |
---|
} elseif($mybb->input['previewpost']) {
|
} elseif($mybb->input['previewpost']) {
|
$username = $mybb->input['username'];
| $username = htmlspecialchars_uni($mybb->input['username']);
|
} eval("\$loginbox = \"".$templates->get("loginbox")."\";"); }
| } eval("\$loginbox = \"".$templates->get("loginbox")."\";"); }
|
Zeile 257 | Zeile 257 |
---|
$post = $db->fetch_array($query); if(!$mybb->user['uid'] || !$post['username']) {
|
$post = $db->fetch_array($query); if(!$mybb->user['uid'] || !$post['username']) {
|
$post['username'] = $mybb->input['username'];
| $post['username'] = htmlspecialchars_uni($mybb->input['username']);
|
} else {
| } else {
|
Zeile 718 | Zeile 718 |
---|
// Setup the correct ownership of the attachments if($mybb->input['posthash']) {
|
// Setup the correct ownership of the attachments if($mybb->input['posthash']) {
|
$db->query("UPDATE ".TABLE_PREFIX."attachments SET pid='$pid' WHERE posthash='".$mybb->input['posthash']."'");
| $db->query("UPDATE ".TABLE_PREFIX."attachments SET pid='$pid' WHERE posthash='".addslashes($mybb->input['posthash'])."'");
|
} redirect($url, $lang->redirect_newreply); }
| } redirect($url, $lang->redirect_newreply); }
|