- Changed addslashes to mysql_real_escape_string in several files. - Update...

tbrehm

2008-09-18 8500be3f1ba7bcab6b8523507e74a132df58d925

 interface/web/mail/mail_user_filter_edit.php

@@ -101,7 +101,7 @@
         $out .= $this->getRule();
      }
      
      $out = addslashes($out);
      $out = mysql_real_escape_string($out);
      $app->db->datalogUpdate('mail_user', "custom_mailfilter = '$out'", 'mailuser_id', $this->dataRecord["mailuser_id"]);
   
   }