dinislage/PrestaShop
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Cart.php

Browse Source 
If magic_quotes_gpc is enabled, there is no need to escape the characters from $ _POST as they already are.
This commit is contained in:
ChristopheBoucaut committed 2013-07-25 15:46:08 +02:00
1 parent a54ac39632
commit a9e233b209
1 file changed
+4 -2
Download Patch File Download Diff File Expand all files Collapse all files
classes/Cart.php
+4 -2
View File
@@ -3030,8 +3030,10 @@ class CartCore extends ObjectModel
public function addTextFieldToProduct($id_product, $index, $type, $text_value) public function addTextFieldToProduct($id_product, $index, $type, $text_value)
{ {
$text_value = str_replace(array("\n", "\r"), '', nl2br($text_value)); $text_value = str_replace(array("\n", "\r"), '', nl2br($text_value));
$text_value = str_replace('\\', '\\\\', $text_value); if (!_PS_MAGIC_QUOTES_GPC_){
$text_value = str_replace('\'', '\\\'', $text_value); $text_value = str_replace('\\', '\\\\', $text_value);
$text_value = str_replace('\'', '\\\'', $text_value);
}
return $this->_addCustomization($id_product, 0, $index, $type, $text_value, 0); return $this->_addCustomization($id_product, 0, $index, $type, $text_value, 0);
} }