From dd845f4c7eaece33367b15bf60419ca92616a1a0 Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Sun, 20 Feb 2011 18:28:39 +1100
Subject: Finalized report syste,

---
 post.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'post.php')

diff --git a/post.php b/post.php
index 5b1268da..23196c06 100644
--- a/post.php
+++ b/post.php
@@ -111,6 +111,9 @@
 		if(count($report) > $config['report_limit'])
 			error($config['error']['toomanyreports']);
 		
+		$reason = $_POST['reason'];
+		markup($reason);
+		
 		foreach($report as &$id) {
 			$query = prepare(sprintf("SELECT 1 FROM `posts_%s` WHERE `id` = :id", $board['uri']));
 			$query->bindValue(':id', $id, PDO::PARAM_INT);
@@ -122,7 +125,7 @@
 				$query->bindValue(':ip', $_SERVER['REMOTE_ADDR'], PDO::PARAM_STR);
 				$query->bindValue(':board', $board['id'], PDO::PARAM_INT);
 				$query->bindValue(':post', $id, PDO::PARAM_INT);
-				$query->bindValue(':reason', htmlentities($_POST['reason']), PDO::PARAM_STR);
+				$query->bindValue(':reason', $reason, PDO::PARAM_STR);
 				$query->execute() or error(db_error($query));
 			}
 		}
-- 
cgit v1.3