diff --git a/addcomment.php b/addcomment.php index 9bdcb7b..44e25ff 100644 --- a/addcomment.php +++ b/addcomment.php @@ -14,16 +14,10 @@ // application environment include("path.php"); require(BASE."include/incl.php"); +require(BASE."include/filter.php"); require(BASE."include/application.php"); require(BASE."include/mail.php"); -$aClean = array(); //array of filtered user input - -$aClean['iVersionId'] = makeSafe($_REQUEST['iVersionId']); -$aClean['iThread'] = makeSafe($_REQUEST['iThread']); -$aClean['sBody'] = makeSafe($_REQUEST['sBody']); -$aClean['sSubject'] = makeSafe($_REQUEST['sSubject']); - // you must be logged in to submit comments if(!$_SESSION['current']->isLoggedIn()) { @@ -32,14 +26,6 @@ if(!$_SESSION['current']->isLoggedIn()) exit; } -if( !is_numeric($aClean['iVersionId']) ) - util_show_error_page_and_exit('Internal Database Access Error'); - -if(!is_numeric($aClean['iThread'])) -{ - $aClean['iThread'] = 0; -} - // the user submitted his comment if(!empty($aClean['sBody'])) {