From dfe85cca4a163f0e0eca284d8557460cdce2aaa9 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Mon, 12 Mar 2001 18:52:38 +0000
Subject: - fixed small bug in submit.php

---
 submit.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'submit.php')

diff --git a/submit.php b/submit.php
index e4bd2b4da..fb06dfc41 100644
--- a/submit.php
+++ b/submit.php
@@ -66,7 +66,7 @@ function submit_preview($subject, $abstract, $article, $section) {
   $output .= "<TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"15\" NAME=\"article\">". check_textarea($article) ."</TEXTAREA><BR>\n";
   $output .= "<SMALL><I>". t("Allowed HTML tags") .": ". htmlspecialchars($allowed_html) .".</I></SMALL><P>\n";
 
-  $duplicate = db_result(db_query("SELECT COUNT(id) FROM stories WHERE subject = '$subject'"));
+  $duplicate = db_result(db_query("SELECT COUNT(id) FROM stories WHERE subject = '". check_input($subject) ."'"));
 
   if (empty($subject)) {
     $output .= "<FONT COLOR=\"red\">". t("Warning: you did not supply a subject.") ."</FONT><P>\n";
-- 
cgit v1.2.3