bug fix unable to upload

students-alumni-cell-iitkgp · May 30, 2017 · 73b1c5b · 73b1c5b
1 parent 1268a26
commit 73b1c5b
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/plugin/motosave.php b/plugin/motosave.php
@@ -61,7 +61,7 @@
 }
 }
 	$value1=$_SESSION['rollno'];
-	$motto=$_POST['motto'];
+	$motto=mysqli_real_escape_string($connection,$_POST['motto']);
 	$query=$connection->query("UPDATE register
 	SET view_self='$motto' , pro_pic='$target_file'	WHERE rollno='$value1'");
 	echo '<script type="text/javascript">  window.location.href = "register.php";</script>';

diff --git a/plugin/profile/viewsfriend.php b/plugin/profile/viewsfriend.php
@@ -3,8 +3,8 @@
 include '../connection.php';
 $rollno=$_SESSION['rollno'];
 echo "$rollno";
-$depmate=$_POST['froll'];
-$view=$_POST['viewf'];
+$depmate=mysqli_real_escape_string($connection,$_POST['froll']);
+$view=mysqli_real_escape_string($connection,$_POST['viewf']);
 $_SESSION['froll'] = $depmate;
 $_SESSION['viewf'] = $view;
 

diff --git a/plugin/writeupconnect.php b/plugin/writeupconnect.php
@@ -3,8 +3,8 @@
 include 'connection.php';
 
 $value1=$_SESSION['rollno'];
-$writeup=$_POST['writeup'];
-$topic=$_POST['topic'];
+$writeup=mysqli_real_escape_string($connection,$_POST['writeup']);
+$topic=mysqli_real_escape_string($connection,$_POST['topic']);
 $sql5="INSERT INTO writeup SET rollno='$value1',writeup='$writeup',topic='$topic'";
 if(!$connection->query($sql5))
 	{