Bug

[Alex L]

Please add single quotes to the user value on line 297 of /lib/Backend/sql.php 
in the WHUPS CVS. It is currently showing:

return $this->_getAssoc("SELECT name, CONCAT(\"$base\", getvars) AS url FROM 
user_searches WHERE user = $user");

This causes errors because $user is not single quoted. The line should be:

return $this->_getAssoc("SELECT name, CONCAT(\"$base\", getvars) AS url FROM 
user_searches WHERE user = '$user'");


Thanks,

Alex Leverington
admin@networkessence.net

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/