Now MySQL_real_escaping mail text...

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / eventz / add.inc

diff --git a/wwwroot/inc/eventz/add.inc b/wwwroot/inc/eventz/add.inc
index 0345383c2e25afd608739de6defa3bf2c558a7b1..b18a2ca302c744f6736bda613386f1d0a08b8181 100644 (file)
--- a/wwwroot/inc/eventz/add.inc
+++ b/wwwroot/inc/eventz/add.inc
@@ -91,7 +91,7 @@ function add() {
 
     if ($node_system_access=='crypto') {
 
-    require(SYSTEM_ROOT.'/inc/crypto.inc');
+    require(INCLUDE_DIR.'crypto.inc');
 
     if ($_SESSION['crypto'][$node_parent]) {
     $key=$_SESSION['crypto'][$node_parent];
@@ -103,10 +103,6 @@ function add() {
     $node_content=crypto::crypto($node_content,$key);
 
 
-    //setting generated crypto password for viewing
-    if ($node_system_access=='crypto') {
-    $_SESSION['crypto'][$id]=$key;
-    }
 
     }
 
@@ -115,7 +111,7 @@ function add() {
     $params['node_parent']=$node_parent;
     $params['node_system_access']=$node_system_access;
     $params['node_creator']=$_SESSION['user_id'];
-    $params['node_content']=$node_content;
+    $params['node_content']=mysql_escape_string($node_content);
     $params['external_link']=$external_link;
     nodes::addNode($params);
     return true;