Checked

[nucleus-jp/nucleus-plugins.git] / NP_gallery / trunk / gallery / picture_class.php

diff --git a/NP_gallery/trunk/gallery/picture_class.php b/NP_gallery/trunk/gallery/picture_class.php
index d03b799..2ce2393 100644 (file)
--- a/NP_gallery/trunk/gallery/picture_class.php
+++ b/NP_gallery/trunk/gallery/picture_class.php
@@ -77,8 +77,8 @@ class PICTURE {
                        $this->description = stripslashes($this->description);\r
                        $this->description = addslashes($this->description);\r
                        sql_query("update ".sql_table('plug_gallery_picture')\r
-                               ." set title='".addslashes($this->title)."', "\r
-                               ."description='".addslashes($this->description)."', " \r
+                               ." set title='".$this->title."', "\r
+                               ."description='".$this->description."', " \r
                                ."keywords='".addslashes($this->keywords)."',"\r
                                ."albumid=".intval($this->albumid)." "\r
                                ."where pictureid=".intval($this->id) );\r
@@ -465,7 +465,7 @@ class PICTURE {
                if(!$NPG_CONF['viewtime']) $NPG_CONF['viewtime'] = 30 ;\r
                $cuttime = $NPG_CONF['viewtime'];\r
                //first test for duplicates\r
-               $query = 'select * from '.sql_table('plug_gallery_views')." where vpictureid = ".($pictureid);\r
+               $query = 'select * from '.sql_table('plug_gallery_views')." where vpictureid = ".intval($pictureid);\r
                //$result = mysql_query($query);\r
                //print_r($result);\r
                //$numrows= mysql_num_rows($result);\r