I'd like to recommend that the following change be made to
http://www.oscommerce.com/community/contributions,949
The original contrib has the following line
$referer = getenv('HTTP_REFERER');
I'd recommend it be changed to
$referer = mysql_escape_string (getenv('HTTP_REFERER'));
This prevents SQL errors when a user uses an ' in their search query. For example "Father's day".
Latest News: (loading..)
Suggestion for change in vistors log contrib
Started by geobaby, May 15 2003, 02:43
1 reply to this topic
#2
Posted 15 May 2003, 02:45
Oops.. my apologies. Just noticed that there was a support thread for this contrib should have posted it there.
----------------------------
Baby Books and DVDS shop for Hong Kong
Baby Books and DVDS shop for Hong Kong














