From 8500be3f1ba7bcab6b8523507e74a132df58d925 Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Thu, 18 Sep 2008 06:25:41 -0400 Subject: [PATCH] - Changed addslashes to mysql_real_escape_string in several files. - Updated Debian installation instructions. --- server/lib/classes/db_mysql.inc.php | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/server/lib/classes/db_mysql.inc.php b/server/lib/classes/db_mysql.inc.php index bc26ac5..f251532 100644 --- a/server/lib/classes/db_mysql.inc.php +++ b/server/lib/classes/db_mysql.inc.php @@ -163,7 +163,12 @@ // Check der variablen function quote($formfield) { - return addslashes($formfield); + if(!$this->connect()){ + $this->updateError('WARNING: mysql_connect: Used addslashes instead of mysql_real_escape_string'); + return addslashes($formfield); + } + + return mysql_real_escape_string($formfield); } // Check der variablen -- Gitblit v1.9.1