VirtueMart Forum

VirtueMart Dev/Coding Central: VM1 (old version) => Virtuemart 1.1 Development (Archiv) => Quality & Testing VirtueMart 1.1.x => Topic started by: Oliver Griffiths on February 12, 2008, 18:27:40 PM

Title: Bug in ps_product when using product types
Post by: Oliver Griffiths on February 12, 2008, 18:27:40 PM
Hi,

Im not sure if this has been fixed in the latest version of 1.1, but I noticed a bug in ps_product.

Line: 670.

If the user enters an apostraphie eg: don't in a field in the product type info, and it doesnt get converted to its html counterpart by the wysiwyg, then theres an sql error when saving the data as it isnt escaped.

$value="'($value'";

should be

$value="'".addslashes($value)."'";

Hope this helps

Oli