diff options
| author | Savetheinternet <savetheinternet@tinyboard.org> | 2011-10-03 18:52:16 +1100 |
|---|---|---|
| committer | Savetheinternet <savetheinternet@tinyboard.org> | 2011-10-03 18:52:16 +1100 |
| commit | e5a30f7c098c16ec24d07beb94fafb796ce070f8 (patch) | |
| tree | 48455b1d252eed817eb1802c52efc60549f96509 | |
| parent | 23cfaf0cd39afe93b93b7f3094e9b64fe7464ae8 (diff) | |
incorrectly escaped HTML on a now non-existent mod noticeboard post
| -rw-r--r-- | mod.php | 10 |
1 files changed, 6 insertions, 4 deletions
@@ -523,9 +523,7 @@ $m_query = prepare("SELECT `username` FROM `mods` WHERE `id` = :id"); $m_query->bindValue(':id', $notice['mod'], PDO::PARAM_INT); $m_query->execute() or error(db_error($m_query)); - if(!$_mod = $m_query->fetch()) { - $_mod = Array('username' => '<em>???</em>'); - } + $_mod = $m_query->fetch(); $body .= '<div class="ban">' . (hasPermission($config['mod']['noticeboard_delete']) ? @@ -538,7 +536,11 @@ '<em>no subject</em>' ) . '<span class="unimportant"> — by ' . - utf8tohtml($_mod['username']) . + ($_mod ? + utf8tohtml($_mod['username']) + : + '<em>???</em>' + ) . ' at ' . date($config['post_date'], $notice['time']) . '</span></h2><p>' . $notice['body'] . '</p></div>'; |
