addslashes() did escape also single quotes (') which breaks some banner rotation...

[mailer.git] / inc / libs / theme_functions.php

diff --git a/inc/libs/theme_functions.php b/inc/libs/theme_functions.php
index 64dbda3d65b4058763a5f26b5be92403f0e144e2..e53451b33b9bb211df4c20a7037f50cd3990aa0e 100644 (file)
--- a/inc/libs/theme_functions.php
+++ b/inc/libs/theme_functions.php
@@ -72,7 +72,7 @@ function generateThemeSelectionBox () {
        // Load all themes
        while ($content = SQL_FETCHARRAY($result)) {
                // Construct relative include file name
-               $inc = sprintf("theme/%s/theme.php", SQL_ESCAPE($content['theme_path']));
+               $inc = sprintf("theme/%s/theme.php", secureString($content['theme_path']));
 
                // Load it's theme.php file if found
                if (isIncludeReadable($inc)) {