- Changed addslashes to mysql_real_escape_string in several files. - Update...

tbrehm

2008-09-18 8500be3f1ba7bcab6b8523507e74a132df58d925

 interface/lib/classes/form.inc.php

@@ -293,7 +293,7 @@
            switch ($this->tableDef[$key]['datatype']) {
            case 'VARCHAR':
               if(!is_array($val)) {
                  $new_record[$key] = addslashes($val);
                  $new_record[$key] = mysql_real_escape_string($val);
               } else {
                  $new_record[$key] = implode($this->tableDef[$key]['separator'],$val);
               }
@@ -308,7 +308,7 @@
               $new_record[$key] = intval($val);
            break;
            case 'DOUBLE':
               $new_record[$key] = addslashes($val);
               $new_record[$key] = mysql_real_escape_string($val);
            break;
            case 'CURRENCY':
               $new_record[$key] = str_replace(",",".",$val);