From 3b33154284762e615dfaf797ae6979f0c656ac89 Mon Sep 17 00:00:00 2001 From: umherirrender Date: Sun, 13 Jan 2013 20:35:28 +0100 Subject: [PATCH] Fix hardcode database quotes in Special:Watchlist Change-Id: I0d53a24b35a855a541fb73d8bbfcace9de74e549 --- includes/specials/SpecialWatchlist.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialWatchlist.php b/includes/specials/SpecialWatchlist.php index 3cfa31f167..afa39861e4 100644 --- a/includes/specials/SpecialWatchlist.php +++ b/includes/specials/SpecialWatchlist.php @@ -196,7 +196,7 @@ class SpecialWatchlist extends SpecialPage { $conds = array(); if( $values['days'] > 0 ) { - $conds[] = "rc_timestamp > '".$dbr->timestamp( time() - intval( $values['days'] * 86400 ) )."'"; + $conds[] = 'rc_timestamp > ' . $dbr->addQuotes( $dbr->timestamp( time() - intval( $values['days'] * 86400 ) ) ); } # If the watchlist is relatively short, it's simplest to zip -- 2.20.1