diff --git a/include/class.osticket.php b/include/class.osticket.php index 671bdca4ba7f34ab99698dba009e79a73e06e61c..4b064e4ee27539aa17b2d6186821d7937ad164f7 100644 --- a/include/class.osticket.php +++ b/include/class.osticket.php @@ -297,11 +297,11 @@ class osTicket { //Save log based on system log level settings. $loglevel=array(1=>'Error','Warning','Debug'); - $sql='INSERT INTO '.SYSLOG_TABLE.' SET created=NOW(), updated=NOW() '. - ',title='.db_input($title). - ',log_type='.db_input($loglevel[$level]). - ',log='.db_input($message). - ',ip_address='.db_input($_SERVER['REMOTE_ADDR']); + $sql='INSERT INTO '.SYSLOG_TABLE.' SET created=NOW(), updated=NOW() ' + .',title='.db_input(Format::sanitize($title, true)) + .',log_type='.db_input($loglevel[$level]) + .',log='.db_input(Format::sanitize($message, false)) + .',ip_address='.db_input($_SERVER['REMOTE_ADDR']); db_query($sql, false);