From: Mike Macgirvin Date: Fri, 13 Aug 2010 12:59:59 +0000 (-0700) Subject: missed escape on email receive X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=2ee1b00c9c17f9ae299376a84d8055b0308864bf;p=friendica.git missed escape on email receive --- diff --git a/mod/dfrn_notify.php b/mod/dfrn_notify.php index 057dfcb422..03d96d27ea 100644 --- a/mod/dfrn_notify.php +++ b/mod/dfrn_notify.php @@ -68,6 +68,7 @@ function dfrn_notify_post(&$a) { $msg['parent-uri'] = notags(unxmlify($base['in-reply-to'][0]['data'])); $msg['created'] = datetime_convert(notags(unxmlify('UTC','UTC',$base['sentdate'][0]['data']))); + dbesc_array($msg); $r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg)) . "`) VALUES ('" . implode("', '", array_values($msg)) . "')" );