Fixed error when putting ' in a URL by accident.

bigtreecms · Jul 3, 2013 · c5f27bf · c5f27bf · fgeek · Aug 8, 2013
1 parent 22114b8
commit c5f27bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/inc/bigtree/cms.php b/core/inc/bigtree/cms.php
@@ -127,7 +127,7 @@ function checkOldRoutes($path) {
 			$found = false;
 			$x = count($path);
 			while ($x) {
-				$f = sqlfetch(sqlquery("SELECT * FROM bigtree_route_history WHERE old_route = '".implode("/",array_slice($path,0,$x))."'"));
+				$f = sqlfetch(sqlquery("SELECT * FROM bigtree_route_history WHERE old_route = '".sqlescape(implode("/",array_slice($path,0,$x)))."'"));
 				if ($f) {
 					$old = $f["old_route"];
 					$new = $f["new_route"];