From 375fdf887c5b56a850c1cd956f9fefbe6955578a Mon Sep 17 00:00:00 2001
From: posweg <posweg@protonmail.com>
Date: Thu, 21 May 2020 20:29:28 +0000
Subject: [PATCH] Fix error on publishing single quotes

---
 action/publish-question.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/action/publish-question.php b/action/publish-question.php
index ae68021..f57a9d6 100644
--- a/action/publish-question.php
+++ b/action/publish-question.php
@@ -1,5 +1,6 @@
 <?php 
 session_start();
+include("../include/settings.php");
 
 $db = new SQLite3('../ask.db');
 
@@ -16,12 +17,13 @@ if(isset($_POST["post-submit"])){
 	else{
 		$u = $p_user["id"];
 		$by = 0;
-		$question = htmlspecialchars($_POST["post-text"]);
+		$question = htmlspecialchars($_POST["post-text"], ENT_QUOTES);
 
 		// Insert user into DB
 		$db->exec("INSERT INTO questions(user,by,question,answered,date) VALUES ('$u','$by','$question',0,". strtotime('now') .");");
 		unset($_POST["post-text"]);
-		header("Location: /user/" . $p_user["username"]);
+		if($fancy_urls) header("Location: /user/" . $p_user["username"]);
+		else header("Location: /user.php?q=" . $p_user["username"]);
 	}
 }
 ?>