Index: mythplugins/mythweb/video_edit.php =================================================================== RCS file: /var/lib/mythcvs/mythplugins/mythweb/video_edit.php,v retrieving revision 1.3 diff -u -r1.3 video_edit.php --- mythplugins/mythweb/video_edit.php 27 Feb 2005 22:39:29 -0000 1.3 +++ mythplugins/mythweb/video_edit.php 3 Jun 2005 05:21:31 -0000 @@ -31,6 +31,10 @@ //check to see if the form has been submitted if (isset($_POST['submit'])) { + // Add escape character before single quotes in Title and Plot + $_POST['title'] = addcslashes($_POST['title'], "'"); + $_POST['plot'] = addcslashes($_POST['plot'], "'"); + //insert data into database mysql_query("UPDATE videometadata SET title='{$_POST['title']}',director='{$_POST['director']}',plot='{$_POST['plot']}',category='{$_POST['category']}',rating='{$_POST['rating']}',inetref='{$_POST['inetref']}',year='{$_POST['year']}',userrating='{$_POST['userrating']}',length='{$_POST['length']}' WHERE intid='{$_POST['intid']}'");