Forgot to add slashes

diff --git a/src/LinuxTag/2005/supporter/update.wml b/src/LinuxTag/2005/supporter/update.wml
index 1328b2c..c18b956 100644 (file)
--- a/src/LinuxTag/2005/supporter/update.wml
+++ b/src/LinuxTag/2005/supporter/update.wml
@@ -473,12 +473,12 @@
 
     $query = sprintf("INSERT INTO job (title, location, description, priority, comment, section) " .
                     " VALUES ('%s', '%s', '%s', %d, '%s', '%s')",
-                    $prow['title'],
-                    $prow['location'],
-                    $prow['description'],
+                    addslashes($prow['title']),
+                    addslashes($prow['location']),
+                    addslashes($prow['description']),
                     $prow['priority'], 
-                    $prow['comment'],
-                    $prow['section']);
+                    addslashes($prow['comment']),
+                    addslashes($prow['section']));
 
     $sth = pg_exec($dbh, $query) or die ("Cannot add this job.");