Changeset 12990 for trunk/xmlrpc/BxDolXMLRPCMessages.php

Timestamp:

10/20/09 19:42:05 (3 years ago)

Author:

Alexander Trofimov

Message:

Ticket #1340

File:

• trunk/xmlrpc/BxDolXMLRPCMessages.php (modified) (3 diffs)

trunk/xmlrpc/BxDolXMLRPCMessages.php

@@ -32 +32 @@
         require_once( BX_DIRECTORY_PATH_ROOT . 'templates/tmpl_' . $GLOBALS['tmpl'] . '/scripts/BxTemplMailBox.php'); 
 
+        $sRecipient = process_db_input ($sRecipient, BX_TAGS_NO_ACTION, BX_SLASHES_NO_ACTION);
         $aRecipient = db_arr("SELECT * FROM `Profiles` WHERE `NickName` = '$sRecipient'");
         if (!$aRecipient)
@@ -44 +45 @@
             'send_copy_to_me' => 'me' == $sSendTo || 'both' == $sSendTo ? true : false,
         );
-        $oMailBox->sendMessage(strip_tags($sSubj), nl2br(strip_tags($sText)), $aRecipient['ID'], $aComposeSettings);
+        $oMailBox->sendMessage(process_db_input ($sSubj, BX_TAGS_STRIP, BX_SLASHES_NO_ACTION), nl2br(process_db_input ($sText, BX_TAGS_STRIP, BX_SLASHES_NO_ACTION)), $aRecipient['ID'], $aComposeSettings);
         return new xmlrpcval ($oMailBox->iSendMessageStatusCode);
     }
@@ -55 +56 @@
 
         $aMsgs = array ();
+        $iMsgId = (int)$iMsgId;
         $sJoinOn = $isInbox ? " `m`.`Sender` = `p`.`ID` " : " `m`.`Recipient` = `p`.`ID` ";
         $aRow = db_arr ("SELECT