View Single Post
Old May 12th, 2005, 11:47 AM   #5 (permalink)
Frost
Registered User
 
Join Date: Apr 2005
Posts: 148
Quote:
Originally Posted by omegatron
Frost

As I stated to the customer where are they talking? If I look at our code in image-inc.php where a description is entered into the database we accurately addslashes where needed.


Code:
Content visible to verified customers only.
In showproduct we already have this

Code:
Content visible to verified customers only.
Thus I show it being correctly coded. So I need to know more where and what script we are talking
I've already explained this to Michael on April 29th, but for your information, in header-inc.php:
Code:
Content visible to verified customers only.
So escaping is not accounted for correctly. Also, you refer to $desc but use $description = stripslashes( $description ); in showproduct.php, although $desc is used in showproduct.tmpl, so please, instead of trying to tell me it's correct, just fix the code. If you want to be rid of the slash, like I said, in showproduct.php, find $description = stripslashes( $description ); and replace with $desc = stripslashes( $desc );
Frost is offline   Reply With Quote