Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Add Database::escape_string
  • Loading branch information
jmontoyaa committed Dec 4, 2017
1 parent 4673586 commit 07337e2
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions main/inc/lib/fileDisplay.lib.php
Expand Up @@ -283,6 +283,7 @@ function get_total_folder_size($path, $can_see_invisible = false)
'props.session_id'
);

$path = Database::escape_string($path);
$visibility_rule = ' props.visibility '.($can_see_invisible ? '<> 2' : '= 1');

$sql = "SELECT SUM(table1.size) FROM (
Expand Down

0 comments on commit 07337e2

Please sign in to comment.