From d2e0ecd6a34daa3be069ed064092cc5517c0d279 Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Sun, 29 Jul 2018 00:17:12 +0000
Subject: [PATCH] fix unsanitised xchan_name

(cherry picked from commit 97015162282989913d6b54c373af3b73b8043bad)
---
 Zotlabs/Update/_1216.php | 19 +++++++++++++++++++
 boot.php                 |  2 +-
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 Zotlabs/Update/_1216.php

diff --git a/Zotlabs/Update/_1216.php b/Zotlabs/Update/_1216.php
new file mode 100644
index 000000000..843567633
--- /dev/null
+++ b/Zotlabs/Update/_1216.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace Zotlabs\Update;
+
+class _1215 {
+
+	function run() {
+
+		$r = q("UPDATE xchan set xchan_name = 'unknown' where xchan_name like '%<%' ");
+
+		if($r) {
+			return UPDATE_SUCCESS;
+		}
+		else {        
+			return UPDATE_FAILED;
+		}
+	}
+
+}
diff --git a/boot.php b/boot.php
index f249c7560..ceb4d2c2b 100755
--- a/boot.php
+++ b/boot.php
@@ -54,7 +54,7 @@ define ( 'STD_VERSION',             '3.6' );
 define ( 'ZOT_REVISION',            '6.0a' );
 
 
-define ( 'DB_UPDATE_VERSION',       1215 );
+define ( 'DB_UPDATE_VERSION',       1216 );
 
 define ( 'PROJECT_BASE',   __DIR__ );