Error when edit a shout in TPShout controlpanel

[Kimmen]

Link to my site: http://www.efclan.eu
SMF version: RC4 sec.patch
TP version: TP ver. 1.102
Default Forum Language: English
Theme name and version: Catamosphere by Shine-Art & Smf Personal
Browser Name and Version: Newest
Mods installed: Mods listed here
Related Error messages:
DATABASE ERROR:

Code Select Expand

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''gameservers.com killed our server again !!! YAAY. :-\' WHERE id=433' at line 1
File: /customers/efclan.eu/efclan.eu/httpd.www/tp-files/tp-modules/TPShout/Sources/TPShout.php
Line: 313


Happens when edit a shout in the controlpanel.

[IchBin]

At line 313 look for this code:

Code Select Expand

tp_query("UPDATE " . $tp_prefix . "shoutbox SET value1='". htmlspecialchars($value,ENT_QUOTES). "' WHERE id=" .$val, __FILE__, __LINE__);

Replace with this:

Code Select Expand

tp_query("UPDATE " . $tp_prefix . "shoutbox SET value1='". mysql_real_escape_string(htmlspecialchars($value,ENT_QUOTES)). "' WHERE id=" .$val, __FILE__, __LINE__);

[Kimmen]

Thanks, that fixes it..