- Changed addslashes to mysql_real_escape_string in several files. - Update...

tbrehm

2008-09-18 8500be3f1ba7bcab6b8523507e74a132df58d925

 server/lib/classes/db_mysql.inc.php

@@ -163,7 +163,12 @@
      // Check der variablen
        function quote($formfield)
        {
            return addslashes($formfield);
            if(!$this->connect()){
            $this->updateError('WARNING: mysql_connect: Used addslashes instead of mysql_real_escape_string');
            return addslashes($formfield);
         }
			
         return mysql_real_escape_string($formfield);
        }
      
      // Check der variablen