Browse Source

[svn r20793] minor - logic changes - replace COURSEMANAGER by COURSEMANAGERLOWSECURITY in agenda tool - (partial FS#3909)

Isaac Flores 16 years ago
parent
commit
1b1bff7ff1
1 changed files with 4 additions and 4 deletions
  1. 4 4
      main/calendar/agenda.inc.php

+ 4 - 4
main/calendar/agenda.inc.php

@@ -1,4 +1,4 @@
-<?php //$Id: agenda.inc.php 20658 2009-05-14 20:12:43Z cfasanando $
+<?php //$Id: agenda.inc.php 20793 2009-05-18 17:56:23Z iflorespaz $
 /* For licensing terms, see /dokeos_license.txt */
 /*
 ==============================================================================
@@ -973,7 +973,7 @@ function store_new_agenda_item() {
 	
 	$content=stripslashes($content);
 	$title=Database::escape_string(Security::remove_XSS($title));
-	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER));
+	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY));
 	$start_date=Database::escape_string($start_date);
 	$end_date=Database::escape_string($end_date);
 	
@@ -1627,7 +1627,7 @@ function save_edit_agenda_item($id,$title,$content,$start_date,$end_date)
 	$id=Database::escape_string($id);
 	$title=Database::escape_string(Security::remove_XSS($title));
 	$content=stripslashes($content);
-	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER));
+	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY));
 	$start_date=Database::escape_string($start_date);
 	$end_date=Database::escape_string($end_date);
 
@@ -4319,7 +4319,7 @@ function agenda_add_item($course_info, $title, $content, $db_start_date, $db_end
     // some filtering of the input data
     $content=stripslashes($content);
 	$title=Database::escape_string(Security::remove_XSS($title));
-	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGER));   
+	$content = Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY));   
     $start_date = Database::escape_string($db_start_date);
     $end_date   = Database::escape_string($db_end_date);
     isset($_SESSION['id_session'])?$id_session=intval($_SESSION['id_session']):$id_session=null;