/[drupal]/contributions/modules/cvslog/cvs.module
ViewVC logotype

Diff of /contributions/modules/cvslog/cvs.module

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

revision 1.28, Fri Oct 15 19:35:50 2004 UTC revision 1.29, Wed Nov 24 22:03:32 2004 UTC
# Line 1  Line 1 
1  <?php  <?php
2  // $Id: cvs.module,v 1.27 2004/10/15 19:31:11 goba Exp $  // $Id: cvs.module,v 1.28 2004/10/15 19:35:50 tdobes Exp $
3    
4  function cvs_help($section) {  function cvs_help($section) {
5    if ($section == 'admin/modules#description') {    if ($section == 'admin/modules#description') {
# Line 123  function cvs_page() { Line 123  function cvs_page() {
123    
124    // Transform query string into query string:    // Transform query string into query string:
125    if (is_numeric($_GET['commit'])) {    if (is_numeric($_GET['commit'])) {
126      $where[] = "m.cid = ". check_query($_GET['commit']);      $where[] = "m.cid = ". db_escape_string($_GET['commit']);
127    }    }
128    if ($_GET['user']) {    if ($_GET['user']) {
129      $where[] = "m.user = '". check_query($_GET['user']) ."'";      $where[] = "m.user = '". db_escape_string($_GET['user']) ."'";
130    }    }
131    if ($_GET['branch']) {    if ($_GET['branch']) {
132      $branch = strtolower($_GET['branch']) == 'head' ? '' : $_GET['branch'];      $branch = strtolower($_GET['branch']) == 'head' ? '' : $_GET['branch'];
133      $where[] = "f.branch = '". check_query($branch) ."'";      $where[] = "f.branch = '". db_escape_string($branch) ."'";
134      $join = 1;      $join = 1;
135    }    }
136    if ($_GET['file']) {    if ($_GET['file']) {
137      $where[] = "f.file LIKE '". check_query($_GET['file']) ."%'";      $where[] = "f.file LIKE '". db_escape_string($_GET['file']) ."%'";
138      $join = 1;      $join = 1;
139    }    }
140    if (isset($rid)) {    if (isset($rid)) {
141      $where[] = "m.rid = $rid";      $where[] = "m.rid = $rid";
142    }    }
143    if ($_GET['message']) {    if ($_GET['message']) {
144      $where[] = "m.message LIKE '%". check_query($_GET['message']) ."%'";      $where[] = "m.message LIKE '%". db_escape_string($_GET['message']) ."%'";
145    }    }
146    
147    if ($where) {    if ($where) {
Legend:
Removed from v.1.28  
changed lines
  Added in v.1.29
  ViewVC Help
Powered by ViewVC 1.1.2