From 8500be3f1ba7bcab6b8523507e74a132df58d925 Mon Sep 17 00:00:00 2001
From: tbrehm <t.brehm@ispconfig.org>
Date: Thu, 18 Sep 2008 06:25:41 -0400
Subject: [PATCH] - Changed addslashes to mysql_real_escape_string in several files. - Updated Debian installation instructions.

---
 server/lib/classes/db_mysql.inc.php |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diff --git a/server/lib/classes/db_mysql.inc.php b/server/lib/classes/db_mysql.inc.php
index bc26ac5..f251532 100644
--- a/server/lib/classes/db_mysql.inc.php
+++ b/server/lib/classes/db_mysql.inc.php
@@ -163,7 +163,12 @@
 		// Check der variablen
         function quote($formfield)
         {
-            return addslashes($formfield);
+            if(!$this->connect()){
+				$this->updateError('WARNING: mysql_connect: Used addslashes instead of mysql_real_escape_string');
+				return addslashes($formfield);
+			}
+			
+			return mysql_real_escape_string($formfield);
         }
 		
 		// Check der variablen

--
Gitblit v1.9.1