Fixed: FS#945 - Table columns should be quoted in Server/lib/classes/db_mys...

tbrehm

2009-10-27 33d95b8059fcf40e5c70ad7fbcfa0565a9c05473

Fixed: FS#945 - Table columns should be quoted in Server/lib/classes/db_mysql.inc.php 

 server/lib/classes/db_mysql.inc.php

@@ -189,7 +189,8 @@
        return $out;
        }
       
       
       /*
       //* These functions are deprecated and will be removed.
       function insert($tablename,$form,$debug = 0)
       {
         if(is_array($form)){
@@ -224,6 +225,7 @@
               if($debug == 1) echo "mySQL Error Message: ".$this->errorMessage;
           }
       }
       */
       
       public function closeConn()
        {

 server/plugins-available/apache2_plugin.inc.php

@@ -144,8 +144,8 @@
            exec("chmod 400 $key_file2");
            @unlink($config_file);
            @unlink($rand_file);
            $ssl_request = file_get_contents($csr_file);
            $ssl_cert = file_get_contents($crt_file);
            $ssl_request = $app->db->quote(file_get_contents($csr_file));
            $ssl_cert = $app->db->quote(file_get_contents($crt_file));
            /* Update the DB of the (local) Server */
            $app->db->query("UPDATE web_domain SET ssl_request = '$ssl_request', ssl_cert = '$ssl_cert' WHERE domain = '".$data["new"]["domain"]."'");
            $app->db->query("UPDATE web_domain SET ssl_action = '' WHERE domain = '".$data["new"]["domain"]."'");