diff --git a/modules/statistics.module b/modules/statistics.module index ed6c28d1725..9eaccd6fe8a 100644 --- a/modules/statistics.module +++ b/modules/statistics.module @@ -78,7 +78,7 @@ function statistics_exit() { } if ((variable_get('statistics_enable_access_log', 0)) && (module_invoke('throttle', 'status') == 0)) { // Log this page access. - db_query("INSERT INTO {accesslog} (title, path, url, hostname, uid, sid, timer, timestamp) values('%s', '%s', '%s', '%s', %d, '%s', %d, %d)", decode_entities(strip_tags(drupal_get_title())), $_GET['q'], referer_uri(), $_SERVER['REMOTE_ADDR'], $user->uid, session_id(), timer_read('page'), time()); + db_query("INSERT INTO {accesslog} (title, path, url, hostname, uid, sid, timer, timestamp) values('%s', '%s', '%s', '%s', %d, '%s', %d, %d)", strip_tags(drupal_get_title()), $_GET['q'], referer_uri(), $_SERVER['REMOTE_ADDR'], $user->uid, session_id(), timer_read('page'), time()); } } @@ -150,7 +150,7 @@ function statistics_access_log($aid) { if ($access = db_fetch_object($result)) { $output = ''; $output .= ' "; - $output .= ' '; + $output .= ' '; // safe because it comes from drupal_get_title() $output .= ' "; $output .= ' '; $output .= ' '; diff --git a/modules/statistics/statistics.module b/modules/statistics/statistics.module index ed6c28d1725..9eaccd6fe8a 100644 --- a/modules/statistics/statistics.module +++ b/modules/statistics/statistics.module @@ -78,7 +78,7 @@ function statistics_exit() { } if ((variable_get('statistics_enable_access_log', 0)) && (module_invoke('throttle', 'status') == 0)) { // Log this page access. - db_query("INSERT INTO {accesslog} (title, path, url, hostname, uid, sid, timer, timestamp) values('%s', '%s', '%s', '%s', %d, '%s', %d, %d)", decode_entities(strip_tags(drupal_get_title())), $_GET['q'], referer_uri(), $_SERVER['REMOTE_ADDR'], $user->uid, session_id(), timer_read('page'), time()); + db_query("INSERT INTO {accesslog} (title, path, url, hostname, uid, sid, timer, timestamp) values('%s', '%s', '%s', '%s', %d, '%s', %d, %d)", strip_tags(drupal_get_title()), $_GET['q'], referer_uri(), $_SERVER['REMOTE_ADDR'], $user->uid, session_id(), timer_read('page'), time()); } } @@ -150,7 +150,7 @@ function statistics_access_log($aid) { if ($access = db_fetch_object($result)) { $output = '
'. t('URL') ."". l(url($access->path, NULL, NULL, TRUE), $access->path) ."
'. t('Title') .''. check_plain($access->title) .'
'. t('Title') .''. $access->title .'
'. t('Referrer') ."". ($access->url ? l($access->url, $access->url) : '') ."
'. t('Date') .''. format_date($access->timestamp, 'large') .'
'. t('User') .''. theme('username', $access) .'
'; $output .= ' "; - $output .= ' '; + $output .= ' '; // safe because it comes from drupal_get_title() $output .= ' "; $output .= ' '; $output .= ' ';
'. t('URL') ."". l(url($access->path, NULL, NULL, TRUE), $access->path) ."
'. t('Title') .''. check_plain($access->title) .'
'. t('Title') .''. $access->title .'
'. t('Referrer') ."". ($access->url ? l($access->url, $access->url) : '') ."
'. t('Date') .''. format_date($access->timestamp, 'large') .'
'. t('User') .''. theme('username', $access) .'