markup modifiers: there was a plan for adding markup to ban reasons, but assignment was missing; escape markup there too

This commit is contained in:
czaks 2013-07-31 20:33:27 -04:00
parent d7ea47a91f
commit ce2af291b0

View File

@ -61,7 +61,8 @@ function ban($mask, $reason, $length, $board) {
$query->bindValue(':mod', $mod['id']);
$query->bindValue(':time', time());
if ($reason !== '') {
markup($reason);
$reason = escape_markup_modifiers($reason);
$reason = markup($reason);
$query->bindValue(':reason', $reason);
} else
$query->bindValue(':reason', null, PDO::PARAM_NULL);