Merge pull request #43 from rexllc/patch-3

Added real_escape_string
NXTS-Developers · Dec 7, 2021 · c4e3b23 · c4e3b23
2 parents e52e75d + a3bd062
commit c4e3b23
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/admin/function/NewKnowledgebase.php b/src/admin/function/NewKnowledgebase.php
@@ -4,8 +4,8 @@
 require_once __DIR__.'/../handler/AreaHandler.php';
 if(isset($_POST['submit'])){
 	$FormData = array(
-		'subject' => $_POST['subject'],
-		'content' => $_POST['editor'],
+		'subject' => $connect->real_escape_string($_POST['subject']),
+		'content' => $connect->real_escape_string($_POST['editor']),
 		'date' => date('d-m-Y')
 	);
 	$sql = mysqli_query($connect,"INSERT INTO `hosting_knowledgebase`(`knowledgebase_subject`,`knowledgebase_date`,`knowledgebase_content`) VALUES ('".$FormData['subject']."','".$FormData['date']."','".$FormData['content']."')");
@@ -31,4 +31,4 @@
 else{
 	header('location: ../');
 }
-?>
+?>