Fix possible SQL injection

Piwigo · Oct 12, 2023 · c949586 · c949586
1 parent b95445f
commit c949586
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/admin/admin_tag.php b/admin/admin_tag.php
@@ -204,7 +204,7 @@
 					$tag_ids = array();
 					foreach ($tag_names as $tag_name)
 					{
-						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".$tag_name) );
+						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".pwg_db_real_escape_string($tag_name)) );
 					}
 					/* Assign tags to image */
 					//print_r($tag_ids);