diff options
| author | Andrew Dolgov <[email protected]> | 2005-11-20 08:21:17 +0100 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2005-11-20 08:21:17 +0100 |
| commit | 4401bf04c38a1a631bd569689b20ad7fa065efa4 (patch) | |
| tree | 370554d4caac27035462fccf6d3705f8d0c4a2e2 /backend.php | |
| parent | b6b535ca74da3729b4bc4c3c95cee309ff624f39 (diff) | |
remove unneeded escaping in label/add
Diffstat (limited to 'backend.php')
| -rw-r--r-- | backend.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/backend.php b/backend.php index a3b4f6993..b8455b485 100644 --- a/backend.php +++ b/backend.php @@ -1202,7 +1202,7 @@ $regexp = db_escape_string(trim($_GET["regexp"])); $match = db_escape_string(trim($_GET["match"])); - + $result = db_query($link, "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid) VALUES ('$regexp', (SELECT id FROM ttrss_filter_types WHERE @@ -1373,7 +1373,8 @@ if (!WEB_DEMO_MODE) { - $exp = db_escape_string(trim($_GET["exp"])); + // no escaping is done here on purpose + $exp = trim($_GET["exp"]); $result = db_query($link, "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) |