Merge pull request #237 from fgtham/master

Fix possible SQL injection
Piwigo · Oct 12, 2023 · fb9121b · fb9121b
2 parents b95445f + c949586
commit fb9121b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/admin/admin_tag.php b/admin/admin_tag.php
@@ -204,7 +204,7 @@
 					$tag_ids = array();
 					foreach ($tag_names as $tag_name)
 					{
-						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".$tag_name) );
+						array_push( $tag_ids, tag_id_from_tag_name($sync_options['osm_tag_group'].":".pwg_db_real_escape_string($tag_name)) );
 					}
 					/* Assign tags to image */
 					//print_r($tag_ids);