Not escaping strings makes me queasy, even if we're *pretty* sure that database times...
authorBrion Vibber <brion@users.mediawiki.org>
Mon, 4 Feb 2008 22:37:33 +0000 (22:37 +0000)
committerBrion Vibber <brion@users.mediawiki.org>
Mon, 4 Feb 2008 22:37:33 +0000 (22:37 +0000)
commited1b071355aa45955e8859c66177db952f871dcf
tree53517e36192802388e18d1fec38baaed226bdf76
parent307a7b6433a4e9eeab173215e0791314b07a8240
Not escaping strings makes me queasy, even if we're *pretty* sure that database timestamps will always format to a safe value!
Wrap an addQuotes around those timestamp calls...
includes/filerepo/LocalFile.php