Bug fix large class size going over max vars

Bug fix missing addslashes in assessment lookup
kreut · Jan 28, 2014 · a384adc · a384adc
1 parent b288078
commit a384adc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.htaccess b/.htaccess
@@ -19,3 +19,4 @@ AddType application/vnd.ms-excel.template.macroEnabled.12 xltm
 AddType application/vnd.openxmlformats-officedocument.spreadsheetml.template xltx
 Options -Indexes
 php_value upload_max_filesize 10M
+php_value max_input_vars 5000
diff --git a/msgs/viewmsg.php b/msgs/viewmsg.php
@@ -112,7 +112,8 @@ function showtrimmed(el) {
 		echo " <a href=\"mailto:{$line['email']}\">email</a> | ";
 		echo " <a href=\"$imasroot/course/gradebook.php?cid={$line['courseid']}&stu={$line['msgfrom']}\" target=\"_popoutgradebook\">gradebook</a>";
 		if (preg_match('/Question\s+about\s+#(\d+)\s+in\s+(.*)\s*$/',$line['title'],$matches)) {
-			$query = "SELECT id FROM imas_assessments WHERE name='{$matches[2]}' AND courseid='{$line['courseid']}'";
+			$aname = addslashes($matches[2]);
+			$query = "SELECT id FROM imas_assessments WHERE name='$aname' AND courseid='{$line['courseid']}'";
 			$res = mysql_query($query) or die("Query failed : $query " . mysql_error());
 			if (mysql_num_rows($res)>0) {
 				$aid = mysql_result($res,0,0);