arno/lychee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Escape data before writing to config.php (#38)

Browse Source
This commit is contained in:
Tobias Reich 2014-08-29 20:10:50 +02:00
parent 3170898364
commit 8b76fadf6d
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
php/modules/Database.php
View File

@ -86,6 +86,13 @@ class Database extends Module {
} }
# Escape data
$host = mysqli_real_escape_string($database, $host);
$user = mysqli_real_escape_string($database, $user);
$password = mysqli_real_escape_string($database, $password);
$name = mysqli_real_escape_string($database, $name);
$prefix = mysqli_real_escape_string($database, $prefix);
# Save config.php # Save config.php
$config = "<?php $config = "<?php