open-dsi
/
nextcloud-server
mirror of https://github.com/nextcloud/server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Sanitize user input

Browse Source
remotes/origin/stable45
Lukas Reschke 12 years ago
parent 08132587d1
commit 80aa44565b
1 changed files with 2 additions and 2 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 4
      lib/db.php

4
lib/db.php
Unescape View File

@ -299,7 +299,7 @@ class OC_DB {
// Die if we have an error (error means: bad query, not 0 results!) // Die if we have an error (error means: bad query, not 0 results!)
if( PEAR::isError($result)) { if( PEAR::isError($result)) {
$entry = 'DB Error: "'.$result->getMessage().'"<br />'; $entry = 'DB Error: "'.$result->getMessage().'"<br />';
$entry .= 'Offending command was: '.$query.'<br />'; $entry .= 'Offending command was: '.htmlentities($query).'<br />';
OC_Log::write('core', $entry,OC_Log::FATAL); OC_Log::write('core', $entry,OC_Log::FATAL);
error_log('DB error: '.$entry); error_log('DB error: '.$entry);
die( $entry ); die( $entry );
@ -309,7 +309,7 @@ class OC_DB {
$result=self::$connection->prepare($query); $result=self::$connection->prepare($query);
}catch(PDOException $e) { }catch(PDOException $e) {
$entry = 'DB Error: "'.$e->getMessage().'"<br />'; $entry = 'DB Error: "'.$e->getMessage().'"<br />';
$entry .= 'Offending command was: '.$query.'<br />'; $entry .= 'Offending command was: '.htmlentities($query).'<br />';
OC_Log::write('core', $entry,OC_Log::FATAL); OC_Log::write('core', $entry,OC_Log::FATAL);
error_log('DB error: '.$entry); error_log('DB error: '.$entry);
die( $entry ); die( $entry );

Write Preview
Loading…
Cancel
Save