Fixed Issue #05226 : partially fixed the issue for security breach

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/source/limesurvey@10222 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Jun 7, 2011 · 6ebf9df · 6ebf9df
1 parent 52b3d57
commit 6ebf9df
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/admin/bounceprocessing.php b/admin/bounceprocessing.php
@@ -74,7 +74,7 @@
 						$token=explode(": ",$item);
 						if($surveyidoriginal == $surveyid[1])
 						{ 
-							$bouncequery = "UPDATE ".db_table_name("tokens_$surveyidoriginal")." set emailstatus='bounced' where token='$token[1]';";
+							$bouncequery = "UPDATE ".db_table_name("tokens_$surveyidoriginal")." set emailstatus='bounced' where token='".db_quote($token[1])."';";
 							$anish=$connect->Execute($bouncequery);
 							$bouncetotal++;
 						}
@@ -128,7 +128,7 @@
 							$token=explode(": ",$item);
 							if($surveyidoriginal == $surveyid[1])
 							{ 
-								$bouncequery = "UPDATE ".db_table_name("tokens_$surveyidoriginal")." set emailstatus='bounced' where 							  token='$token[1]';";
+$bouncequery = "UPDATE ".db_table_name("tokens_$surveyidoriginal")." set emailstatus='bounced' where 							  token='".db_quote($token[1])."';";
 								$anish=$connect->Execute($bouncequery) or safe_die ("Couldn't update sent field<br />$query<br />".$connect->ErrorMsg());
 								$bouncetotal++;
 							}