From 45d5aad6dfde192ef5b986f3233a41f15d035f24 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Sat, 24 May 2003 16:26:13 +0000
Subject: - Updated Drupal to use "on output" filters.  Derived from Gerhard's
 patch.

---
 modules/comment/comment.module | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

(limited to 'modules/comment/comment.module')

diff --git a/modules/comment/comment.module b/modules/comment/comment.module
index fca716b31..b4c333a4b 100644
--- a/modules/comment/comment.module
+++ b/modules/comment/comment.module
@@ -58,7 +58,7 @@ function comment_user($type, $edit, &$user) {
       return form_textarea(t("Signature"), "signature", $edit["signature"], 70, 3, t("Your signature will be publicly displayed at the end of your comments.") ."<br />". t("Allowed HTML tags") .": ". htmlspecialchars(variable_get("allowed_html", "<a> <b> <dd> <dl> <dt> <i> <li> <ol> <u> <ul>")));
     case "edit_validate":
       // validate user data editing
-      return array("signature" => filter($edit["signature"]));
+      return array("signature" => $edit["signature"]);
   }
 }
 
@@ -160,10 +160,6 @@ function comment_reply($pid, $nid) {
 function comment_preview($edit) {
   global $user;
 
-  foreach ($edit as $key => $value) {
-    $comment->$key = filter($value);
-  }
-
   /*
   ** Attach the user and time information:
   */
@@ -210,8 +206,6 @@ function comment_post($edit) {
     ** Validate the comment's body.
     */
 
-    $edit["comment"] = filter($edit["comment"]);
-
     if ($edit["comment"] == "") {
       return array(t("Empty comment"), t("The comment you submitted is empty."));
     }
@@ -791,7 +785,7 @@ function comment_delete($edit) {
 }
 
 function comment_save($id, $edit) {
-  db_query("UPDATE comments SET subject = '%s', comment = '%s', status = %d WHERE cid = %d", filter($edit["subject"]), filter($edit["comment"]), $edit["status"], $id);
+  db_query("UPDATE comments SET subject = '%s', comment = '%s', status = %d WHERE cid = %d", $edit["subject"], $edit["comment"], $edit["status"], $id);
   watchdog("special", "comment: modified '". $edit["subject"] ."'");
   return "updated comment.";
 }
-- 
cgit v1.2.3