- Stripe saved cards - lock down invoice and client IDs

- Stop app log handling from breaking due to quotes
This commit is contained in:
wrongecho
2026-05-20 17:51:54 +01:00
parent c5d67cd4f9
commit bd15cbe375
2 changed files with 12 additions and 10 deletions

View File

@@ -1512,8 +1512,8 @@ function logAction($type, $action, $description, $client_id = 0, $entity_id = 0)
function logApp($category, $type, $details) {
global $mysqli;
$category = substr($category, 0, 200);
$details = substr($details, 0, 1000);
$category = mysqli_real_escape_string($mysqli, substr($category, 0, 200));
$details = mysqli_real_escape_string($mysqli, substr($details, 0, 1000));
mysqli_query($mysqli, "INSERT INTO app_logs SET app_log_category = '$category', app_log_type = '$type', app_log_details = '$details'");
}