diff --git a/includes/account.php b/includes/account.php index 673bac0..32538e9 100644 --- a/includes/account.php +++ b/includes/account.php @@ -1850,12 +1850,12 @@ if($oldid == 24 && $process != "") { $id = intval($oldid); - $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($O))); - $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($contact))); - $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($L))); - $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($ST))); - $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($C))); - $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($comments))); + $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O']))); + $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact']))); + $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L']))); + $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST']))); + $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C']))); + $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments']))); if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "") { @@ -1877,12 +1877,12 @@ if($oldid == 27 && $process != "") { $id = intval($oldid); - $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($O))); - $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($contact))); - $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($L))); - $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($ST))); - $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($C))); - $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($comments))); + $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O']))); + $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact']))); + $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L']))); + $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST']))); + $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C']))); + $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments']))); if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "") {