← Back to branch summary

~dangarner/xibo/bug-471636

« back to all changes in this revision

Viewing changes to server/modules/flash.module.php

  • Committer: Dan Garner
  • Date: 2009-08-02 17:19:21 UTC
  • mfrom: (55.1.1 1.0.0)
  • Revision ID: mail@dangarner.co.uk-20090802171921-vwkp0j6v0o0qevh6
Merged lp:~dangarner/xibo/393062

Show diffs side-by-side

added added

removed removed

Lines of Context:
server/modules/flash.module.php
784
784
                        // Editing the existing record
785
785
                        $new_mediaid = $mediaid;
786
786
                        
787
 
                        $SQL =  "UPDATE media SET name = '$name', duration = '$duration', permissionID = $permissionid";
788
 
                        $SQL .= " WHERE mediaID = $mediaid ";
 
787
                        $SQL =  "UPDATE media SET name = '%s', duration = %d, permissionID = %d";
 
788
                        $SQL .= " WHERE mediaID = %d ";
 
789
                        $SQL = sprintf($SQL, $db->escape_string($name), $duration, $permissionid, $mediaid);
 
790
                        
 
791
                        Debug::LogEntry($db, 'audit', $SQL);
789
792
        
790
793
                        if (!$db->query($SQL))
791
794
                        {