Browse Source

Don't escape prepared-query-bound filelist

spaghetti 3 years ago
parent
commit
65c8df6a32
1 changed files with 2 additions and 2 deletions
  1. 2
    2
      sections/upload/upload_handle.php

+ 2
- 2
sections/upload/upload_handle.php View File

@@ -270,8 +270,8 @@ if (count($TooLongPaths) > 0) {
270 270
   $Names = implode(' <br />', $TooLongPaths);
271 271
   $Err = "The torrent contained one or more files with too long a name:<br /> $Names";
272 272
 }
273
-$FilePath = db_string($DirName);
274
-$FileString = db_string(implode("\n", $TmpFileList));
273
+$FilePath = $DirName;
274
+$FileString = implode("\n", $TmpFileList);
275 275
 $Debug->set_flag('upload: torrent decoded');
276 276
 
277 277
 if (!empty($Err)) { // Show the upload form, with the data the user entered

Loading…
Cancel
Save