}\r
content+="<tr>";\r
}\r
+ else if(m_db->GetLastResult()!=SQLITE_OK)\r
+ {\r
+ std::string error="";\r
+ m_db->GetLastError(error);\r
+ content+="<tr><td>"+error+"</td></tr>";\r
+ }\r
while(!rs.AtEnd())\r
{\r
content+="<tr>";\r
content+="<td>";\r
if(rs.GetField(i))\r
{\r
- content+=rs.GetField(i);\r
+ content+=SanitizeOutput(std::string(rs.GetField(i)));\r
}\r
content+="</td>";\r
}\r