[Phpgroupware-cvs] CVS: addressbook/inc class.uifields.inc.php,1.7.2.2,1.7.2.3

[Ralf Becker <address@hidden>]

Update of /cvsroot/phpgroupware/addressbook/inc
In directory subversions:/tmp/cvs-serv14972

Modified Files:
      Tag: eTemplate
        class.uifields.inc.php 
Log Message:
fix for bug #3241 (Apostrophes in custom-fields)


Index: class.uifields.inc.php
===================================================================
RCS file: /cvsroot/phpgroupware/addressbook/inc/class.uifields.inc.php,v
retrieving revision 1.7.2.2
retrieving revision 1.7.2.3
diff -C2 -r1.7.2.2 -r1.7.2.3
*** class.uifields.inc.php      7 Apr 2003 14:24:15 -0000       1.7.2.2
--- class.uifields.inc.php      18 Apr 2003 08:04:41 -0000      1.7.2.3
***************
*** 122,127 ****
                        }
  
!                       $field      = $GLOBALS['HTTP_POST_VARS']['field'];
!                       $field_name = $GLOBALS['HTTP_POST_VARS']['field_name'];
                        $start      = $GLOBALS['HTTP_POST_VARS']['start'];
                        $query      = $GLOBALS['HTTP_POST_VARS']['query'];
--- 122,127 ----
                        }
  
!                       $field      = 
stripslashes($GLOBALS['HTTP_POST_VARS']['field']);
!                       $field_name = 
stripslashes($GLOBALS['HTTP_POST_VARS']['field_name']);
                        $start      = $GLOBALS['HTTP_POST_VARS']['start'];
                        $query      = $GLOBALS['HTTP_POST_VARS']['query'];
***************
*** 150,154 ****
                                if(!$error)
                                {
-                                       $field_name = addslashes($field_name);
                                        
$this->save_custom_field($field,$field_name);
                                }
--- 150,153 ----
***************
*** 198,203 ****
                        }
  
!                       $field      = $GLOBALS['HTTP_POST_VARS']['field'] ? 
$GLOBALS['HTTP_POST_VARS']['field'] : $GLOBALS['HTTP_GET_VARS']['field'];
!                       $field_name = $GLOBALS['HTTP_POST_VARS']['field_name'];
                        $start      = $GLOBALS['HTTP_POST_VARS']['start'] ? 
$GLOBALS['HTTP_POST_VARS']['start'] : $GLOBALS['HTTP_GET_VARS']['start'];
                        $query      = $GLOBALS['HTTP_POST_VARS']['query'] ? 
$GLOBALS['HTTP_POST_VARS']['query'] : $GLOBALS['HTTP_GET_VARS']['query'];
--- 197,202 ----
                        }
  
!                       $field      = 
stripslashes($GLOBALS['HTTP_POST_VARS']['field'] ? 
$GLOBALS['HTTP_POST_VARS']['field'] : $GLOBALS['HTTP_GET_VARS']['field']);
!                       $field_name = 
stripslashes($GLOBALS['HTTP_POST_VARS']['field_name']);
                        $start      = $GLOBALS['HTTP_POST_VARS']['start'] ? 
$GLOBALS['HTTP_POST_VARS']['start'] : $GLOBALS['HTTP_GET_VARS']['start'];
                        $query      = $GLOBALS['HTTP_POST_VARS']['query'] ? 
$GLOBALS['HTTP_POST_VARS']['query'] : $GLOBALS['HTTP_GET_VARS']['query'];
***************
*** 226,231 ****
                                        $error[$errorcount++] = lang('Please 
enter a name for that field!');
                                }
- 
-                               $field_name = addslashes($field_name);
  
                                if(!$error)
--- 225,228 ----