[Dehs-devel] r165 - trunk

[atomo64-guest at alioth.debian.org]

Author: atomo64-guest
Date: 2008-11-29 19:26:56 +0000 (Sat, 29 Nov 2008)
New Revision: 165

Modified:
   trunk/events.class.php
Log:
Also escape the version string when searching for a recorded event


Modified: trunk/events.class.php
===================================================================
--- trunk/events.class.php	2008-11-23 02:39:08 UTC (rev 164)
+++ trunk/events.class.php	2008-11-29 19:26:56 UTC (rev 165)
@@ -124,8 +124,9 @@
     {
         $db = events::DB();
 
-        $eventType    = pg_escape_string($eventType);
-        $packageName  = pg_escape_string($packageName);
+        $eventType     = pg_escape_string($eventType);
+        $packageName   = pg_escape_string($packageName);
+        $contentSearch = pg_escape_string($contentSearch);
 
         $result = pg_exec($db, "SELECT id FROM events WHERE name='$packageName' and type='$eventType' ".($distribution? "and dist='$distribution'":'')." and content LIKE '$contentSearch'") or die_status(pg_last_error($db)."\nFailed to SELECT id FROM events...\n");
         return pg_fetch_all($result);