Fix #1539

2013-10-18 07:34:46 +00:00 · 2013-10-18 07:34:46 +00:00 · 33e657d3e6
parent 03aaab6a94
commit 33e657d3e6
1 changed files with 1 additions and 0 deletions
--- a/bureau/class/m_admin.php
+++ b/bureau/class/m_admin.php
@ -528,6 +528,7 @@ class m_admin {
    }
    $pass=_md5cr($pass);
    $db=new DB_System();
+    $notes = mysql_real_escape_string($notes);
    // Already exist?
    $db->query("SELECT count(*) AS cnt FROM membres WHERE login='$login';");
    $db->next_record();