28
Hi onasre,
From line 1097 to 1110 in the admin/index.php replace
$cid = $_POST['cid'];
$pid = $_POST['pid'];
$title = $myts->htmlSpecialChars($_POST['title']);
$imgurl = "";
if ( empty($title))
{
redirect_header("index.php", 2, _MD_X_MOVIE_ERRORTITLE);
}
if (($_POST["imgurl"]) || ($_POST["imgurl"] != ""))
{
$imgurl = $myts->htmlSpecialChars($_POST["imgurl"]);
}
$weight = $myts->htmlSpecialChars($_POST['weight']);
with
$cid = (int) $_POST['cid'];
$pid = (int) $_POST['pid'];
$title = mysql_real_escape_string($_POST['title']);
$imgurl = "";
if ( empty($title))
{
redirect_header("index.php", 2, _MD_X_MOVIE_ERRORTITLE);
}
if (($_POST["imgurl"]) || ($_POST["imgurl"] != ""))
{
$imgurl = mysql_real_escape_string($_POST["imgurl"]);
}
$weight = (int) $_POST['weight'];
I put the change in x_movie and uploaded it again.
Optikool