Changeset 323

Timestamp:

Nov 5, 2006, 12:30:00 PM (15 years ago)

Author:

Nick Burch

Message:

Escape properly

File:

• trunk/npemap.org.uk/cgi/get-reports.fcgi (modified) (1 diff)

trunk/npemap.org.uk/cgi/get-reports.fcgi

@@ -117 +117 @@
                 foreach my $row (@rows) {
                         my ($postcode,$outward,$inward,$easting,$northing,$id,$source,$reason,$reporter,$reported_time) = @$row;
+                        # Escape the reason and email
+                        $reason =~ s/'/"/;
+                        $reporter =~ s/'/"/;
+
             print "addReport($id, '$postcode', $easting, $northing, [$source], ['$reason','$reporter','$reported_time']);\n";
         }