Escape platform parameter

Fixes Issue #112
bitstadium · Jan 23, 2014 · 9ff40cc · 9ff40cc
1 parent 264f388
commit 9ff40cc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/crash_v300.php b/server/crash_v300.php
@@ -268,7 +268,7 @@ function ValidateString($string, $options) {
   } else if ($reader->name == "log" && $reader->nodeType == XMLReader::ELEMENT) {
     $crashes[$crashIndex]["logdata"] = reading($reader, "log");
   } else if ($reader->name == "platform" && $reader->nodeType == XMLReader::ELEMENT) {
-    $crashes[$crashIndex]["platform"] = reading($reader, "platform");
+    $crashes[$crashIndex]["platform"] = mysql_real_escape_string(reading($reader, "platform"));
   }
 }