X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Finc%2Feventz%2Fbookstyl.inc;h=6398b8723367e99b9a663afb0565e3bca927d817;hb=ac3bdc7218ef24f47f2d6adaae65c59079900665;hp=e9b3456c96eb9fbe428d964b9628e2236ea7fa44;hpb=2bfe7a1ffe730d653c1a27072acb56365be2309e;p=mirrors%2FKyberia-bloodline.git

diff --git a/wwwroot/inc/eventz/bookstyl.inc b/wwwroot/inc/eventz/bookstyl.inc
index e9b3456..6398b87 100644
--- a/wwwroot/inc/eventz/bookstyl.inc
+++ b/wwwroot/inc/eventz/bookstyl.inc
@@ -3,7 +3,7 @@
 	global $error,$node,$db;
 
 	$user_id = $_SESSION['user_id'];
-	$bookstyl = $_POST['bookstyl'];
+	$bookstyl = $_POST['bookstyl']; //XXX sqli
 
 	$set=$db->query("select * from nodes where node_parent=19 and external_link='session://bookstyl' and node_creator='$user_id'");
 	if($set->getNumRows() == 0) {
@@ -27,4 +27,4 @@
 	$_SESSION['bookstyl']= $bookstyl;
 
 }
-?>
\ No newline at end of file
+?>