|
|
|
@ -1,4 +1,4 @@ |
|
|
|
|
<?php //$Id: agenda.inc.php 20658 2009-05-14 20:12:43Z cfasanando $
|
|
|
|
|
<?php //$Id: agenda.inc.php 20793 2009-05-18 17:56:23Z iflorespaz $
|
|
|
|
|
/* For licensing terms, see /dokeos_license.txt */ |
|
|
|
|
/* |
|
|
|
|
============================================================================== |
|
|
|
@ -973,7 +973,7 @@ function store_new_agenda_item() { |
|
|
|
|
|
|
|
|
|
$content=stripslashes($content); |
|
|
|
|
$title=Database::escape_string(Security::remove_XSS($title)); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER)); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY)); |
|
|
|
|
$start_date=Database::escape_string($start_date); |
|
|
|
|
$end_date=Database::escape_string($end_date); |
|
|
|
|
|
|
|
|
@ -1627,7 +1627,7 @@ function save_edit_agenda_item($id,$title,$content,$start_date,$end_date) |
|
|
|
|
$id=Database::escape_string($id); |
|
|
|
|
$title=Database::escape_string(Security::remove_XSS($title)); |
|
|
|
|
$content=stripslashes($content); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER)); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY)); |
|
|
|
|
$start_date=Database::escape_string($start_date); |
|
|
|
|
$end_date=Database::escape_string($end_date); |
|
|
|
|
|
|
|
|
@ -4319,7 +4319,7 @@ function agenda_add_item($course_info, $title, $content, $db_start_date, $db_end |
|
|
|
|
// some filtering of the input data |
|
|
|
|
$content=stripslashes($content); |
|
|
|
|
$title=Database::escape_string(Security::remove_XSS($title)); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER)); |
|
|
|
|
$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY)); |
|
|
|
|
$start_date = Database::escape_string($db_start_date); |
|
|
|
|
$end_date = Database::escape_string($db_end_date); |
|
|
|
|
isset($_SESSION['id_session'])?$id_session=intval($_SESSION['id_session']):$id_session=null; |
|
|
|
|