torrentpier/torrentpier-lts
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier-lts.git synced 2025-02-28 15:10:54 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Updated

Browse Source
This commit is contained in:
Roman Kelesidis 2023-12-18 08:08:39 +07:00
parent c1233af441
commit 794ad67a37
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
search.php
View File

@ -339,7 +339,7 @@ if ($search_id)
FROM ". BB_SEARCH ." FROM ". BB_SEARCH ."
WHERE session_id = '$session_id' WHERE session_id = '$session_id'
AND search_type = ". SEARCH_TYPE_POST ." AND search_type = ". SEARCH_TYPE_POST ."
AND search_id = '$search_id' AND search_id = '" . DB()->escape($search_id) . "'
LIMIT 1 LIMIT 1
"); ");
@ -902,6 +902,7 @@ function fetch_search_ids ($sql, $search_type = SEARCH_TYPE_POST)
$curr_set[$GLOBALS["{$name}_key"]] = $GLOBALS["{$name}_val"]; $curr_set[$GLOBALS["{$name}_key"]] = $GLOBALS["{$name}_val"];
} }
$search_settings = DB()->escape(serialize($curr_set)); $search_settings = DB()->escape(serialize($curr_set));
$search_id = DB()->escape($search_id);
$columns = 'session_id, search_type, search_id, search_time, search_settings, search_array'; $columns = 'session_id, search_type, search_id, search_time, search_settings, search_array';
$values = "'$session_id', $search_type, '$search_id', ". TIMENOW .", '$search_settings', '$search_array'"; $values = "'$session_id', $search_type, '$search_id', ". TIMENOW .", '$search_settings', '$search_array'";

3
tracker.php
View File

@ -329,7 +329,7 @@ if ($search_id)
FROM ". BB_SEARCH ." FROM ". BB_SEARCH ."
WHERE session_id = '$session_id' WHERE session_id = '$session_id'
AND search_type = ". SEARCH_TYPE_TRACKER ." AND search_type = ". SEARCH_TYPE_TRACKER ."
AND search_id = '$search_id' AND search_id = '" . DB()->escape($search_id) . "'
LIMIT 1 LIMIT 1
"); ");
@ -708,6 +708,7 @@ if ($allowed_forums)
if ($tor_count > $per_page && !$search_id) if ($tor_count > $per_page && !$search_id)
{ {
$search_id = make_rand_str(SEARCH_ID_LENGTH); $search_id = make_rand_str(SEARCH_ID_LENGTH);
$search_id = DB()->escape($search_id);
$search_type = SEARCH_TYPE_TRACKER; $search_type = SEARCH_TYPE_TRACKER;
$columns = 'session_id, search_type, search_id, search_time, search_settings, search_array'; $columns = 'session_id, search_type, search_id, search_time, search_settings, search_array';