From d758135e229011d868a4af345821665e811fe3dd Mon Sep 17 00:00:00 2001
From: garvinhicking <garvinhicking>
Date: Sat, 15 Apr 2006 17:46:40 +0000
Subject: [PATCH] Fix inserting random code into
 serendipity_config_local.inc.php as Admin.

---
 include/functions_installer.inc.php | 16 ++++++++--------
 rss.php                             |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/include/functions_installer.inc.php b/include/functions_installer.inc.php
index 5fc795a..f0553b4 100644
--- a/include/functions_installer.inc.php
+++ b/include/functions_installer.inc.php
@@ -95,17 +95,17 @@ function serendipity_updateLocalConfig($dbName, $dbPrefix, $dbHost, $dbUser, $db
     fwrite($configfp, "\t*/\n\n");
 
     fwrite($configfp, "\t\$serendipity['versionInstalled']  = '{$serendipity['version']}';\n");
-    fwrite($configfp, "\t\$serendipity['dbName']            = '{$dbName}';\n");
-    fwrite($configfp, "\t\$serendipity['dbPrefix']          = '{$dbPrefix}';\n");
-    fwrite($configfp, "\t\$serendipity['dbHost']            = '{$dbHost}';\n");
-    fwrite($configfp, "\t\$serendipity['dbUser']            = '{$dbUser}';\n");
-    fwrite($configfp, "\t\$serendipity['dbPass']            = '{$dbPass}';\n");
-    fwrite($configfp, "\t\$serendipity['dbType']            = '{$dbType}';\n");
+    fwrite($configfp, "\t\$serendipity['dbName']            = '" . addslashes($dbName) . "';\n");
+    fwrite($configfp, "\t\$serendipity['dbPrefix']          = '" . addslashes($dbPrefix) . "';\n");
+    fwrite($configfp, "\t\$serendipity['dbHost']            = '" . addslashes($dbHost) . "';\n");
+    fwrite($configfp, "\t\$serendipity['dbUser']            = '" . addslashes($dbUser) . "';\n");
+    fwrite($configfp, "\t\$serendipity['dbPass']            = '" . addslashes($dbPass) . "';\n");
+    fwrite($configfp, "\t\$serendipity['dbType']            = '" . addslashes($dbType) . "';\n");
     fwrite($configfp, "\t\$serendipity['dbPersistent']      = ". (serendipity_db_bool($dbPersistent) ? 'true' : 'false') .";\n");
 
     if (is_array($privateVariables) && count($privateVariables) > 0) {
         foreach($privateVariables AS $p_idx => $p_val) {
-            fwrite($configfp, "\t\$serendipity['{$p_idx}']  = '{$p_val}';\n");
+            fwrite($configfp, "\t\$serendipity['{$p_idx}']  = '" . addslashes($p_val) . "';\n");
         }
     }
 
@@ -1092,7 +1092,7 @@ function serendipity_check_rewrite($default) {
         );
         return $default;
     } else {
-        fwrite($fp, 'ErrorDocument 404 ' . $serendipity_root . 'index.php');
+        fwrite($fp, 'ErrorDocument 404 ' . addslashes($serendipity_root) . 'index.php');
         fclose($fp);
 
         // Do a request on a nonexistant file to see, if our htaccess allows ErrorDocument
diff --git a/rss.php b/rss.php
index 0733c6f..05777a0 100644
--- a/rss.php
+++ b/rss.php
@@ -105,7 +105,7 @@ $metadata = array(
     'language'          => $serendipity['lang'],
     'additional_fields' => array(),
     'link'              => $serendipity['baseURL'],
-    'email'             => $serendipity['email'],
+    'email'             => $serendipity['blogMail'],
     'fullFeed'          => false,
     'showMail'          => false,
     'version'           => $version
-- 
2.39.5