Stop using compile_update_string(). compile_update_string() can be passed a value that includes a character considered
special by query_parameters(). We then use the output from compile_update_string() as a part of the first parameter to query_parameters(), the format string. Having extra special characters causes a token mismatch and query_parameters() will reject the queries entirely. Remove now unused compile_update_string().
This commit is contained in:
@@ -175,9 +175,8 @@ class Bug {
|
||||
if(!$this->bQueued)
|
||||
return false;
|
||||
|
||||
$sUpdate = compile_update_string(array('queued' => "false"));
|
||||
if(query_parameters("UPDATE buglinks SET ".$sUpdate." WHERE linkId='?'",
|
||||
$this->iLinkId))
|
||||
if(query_parameters("UPDATE buglinks SET queued = '?' WHERE linkId='?'",
|
||||
"false", $this->iLinkId))
|
||||
{
|
||||
$this->bQueued = false;
|
||||
// we send an e-mail to intersted people
|
||||
|
||||
Reference in New Issue
Block a user