Pārlūkot izejas kodu

[svn r20805] minor - logic changes - replace COURSEMANAGER by COURSEMANAGERLOWSECURITY in wiki tool - (partial FS#3909)

Isaac Flores 16 gadi atpakaļ
vecāks
revīzija
810fc1ba0a
1 mainītis faili ar 3 papildinājumiem un 3 dzēšanām
  1. 3 3
      main/wiki/index.php

+ 3 - 3
main/wiki/index.php

@@ -2228,7 +2228,7 @@ function save_wiki() {
 
 	$_clean['reflink']=Database::escape_string(Security::remove_XSS($_POST['reflink']));
 	$_clean['title']=Database::escape_string(Security::remove_XSS($_POST['title']));
-	$_clean['content']= Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($_POST['content'])),COURSEMANAGER));
+	$_clean['content']= Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($_POST['content'])),COURSEMANAGERLOWSECURITY));
 	$_clean['user_id']=(int)Database::escape_string(api_get_user_id());
 	$_clean['assignment']=Database::escape_string($_POST['assignment']);
     $_clean['comment']=Database::escape_string(Security::remove_XSS($_POST['comment']));	
@@ -2327,7 +2327,7 @@ function save_new_wiki() {
 	}	
 
 	$_clean['title']=Database::escape_string(Security::remove_XSS($_POST['title']));		    
-	$_clean['content']= Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($_POST['content'])),COURSEMANAGER));
+	$_clean['content']= Database::escape_string(Security::remove_XSS(stripslashes(api_html_entity_decode($_POST['content'])),COURSEMANAGERLOWSECURITY));
 	
 	if($_clean['assignment']==2)  {//config by default for individual assignment (students)	 
 	
@@ -2505,7 +2505,7 @@ function display_wiki_entry()
 	}
 	else
 	{
-  		$content=Security::remove_XSS($row['content'],COURSEMANAGER);
+  		$content=Security::remove_XSS($row['content'],COURSEMANAGERLOWSECURITY);
 		$title= Security::remove_XSS($row['title']);
 	}