From 137f3bc911bcf4e5db6b8d45c0676f5aa89c598a Mon Sep 17 00:00:00 2001
From: Jared Hancock <jared@osticket.com>
Date: Thu, 3 Apr 2014 13:12:33 -0500
Subject: [PATCH] thread: Implement format for Thread::setBody()
---
include/class.thread.php | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/include/class.thread.php b/include/class.thread.php
index b98b33535..f1eb94064 100644
--- a/include/class.thread.php
+++ b/include/class.thread.php
@@ -314,9 +314,16 @@ Class ThreadEntry {
function setBody($body) {
global $cfg;
+ if (!$body instanceof ThreadBody) {
+ if ($cfg->isHtmlThreadEnabled())
+ $body = new HtmlThreadBody($body);
+ else
+ $body = new TextThreadBody($body);
+ }
+
$sql='UPDATE '.TICKET_THREAD_TABLE.' SET updated=NOW()'
- .',body='.db_input(Format::sanitize($body,
- !$cfg->isHtmlThreadEnabled()))
+ .',format='.db_input($body->getType())
+ .',body='.db_input((string) $body)
.' WHERE id='.db_input($this->getId());
return db_query($sql) && db_affected_rows();
}
--
GitLab