[svn r20797] minor - logic changes - replace COURSEMANAGER by COURSEMANAGERLOWSECURITY in glossary tool - (partial FS#3909)

skala
Isaac Flores 16 years ago
parent 08a2e2d800
commit 535e3e1d36
  1. 4
      main/glossary/index.php

@ -164,7 +164,7 @@ function save_glossary($values)
$sql = "INSERT INTO $t_glossary (name, description,display_order)
VALUES(
'".Database::escape_string(Security::remove_XSS($values['glossary_title']))."',
'".Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($values['glossary_comment'])),COURSEMANAGER))."',
'".Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($values['glossary_comment'])),COURSEMANAGERLOWSECURITY))."',
'".(int)($max_glossary_item + 1)."')";
$result = api_sql_query($sql, __FILE__, __LINE__);
$id = Database::get_last_insert_id();
@ -203,7 +203,7 @@ function update_glossary($values)
{
$sql = "UPDATE $t_glossary SET
name = '".Database::escape_string(Security::remove_XSS($values['glossary_title']))."',
description = '".Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($values['glossary_comment'])),COURSEMANAGER))."'
description = '".Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($values['glossary_comment'])),COURSEMANAGERLOWSECURITY))."'
WHERE glossary_id = ".Database::escape_string($values['glossary_id']);
$result = api_sql_query($sql, __FILE__, __LINE__);
//update glossary into item_property

Loading…
Cancel
Save