Changeset 226 for trunk/database.php
- Timestamp:
- Jun 1, 2009, 9:26:26 AM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/database.php
r219 r226 39 39 foreach($Data as $Key => $Value) 40 40 { 41 $Value = strtr($Value, '"', '\"');42 41 $Name .= ',`'.$Key.'`'; 43 if(!in_array($Value, $this->Functions)) $Value = '"'.$ Value.'"';42 if(!in_array($Value, $this->Functions)) $Value = '"'.$this->real_escape_string($Value).'"'; 44 43 $Values .= ','.$Value; 45 44 } … … 54 53 foreach($Data as $Key => $Value) 55 54 { 56 $Value = strtr($Value, '"', '\"'); 57 if(!in_array($Value, $this->Functions)) $Value = '"'.$Value.'"'; 55 if(!in_array($Value, $this->Functions)) $Value = '"'.$this->real_escape_string($Value).'"'; 58 56 $Values .= ', '.$Key.'='.$Value; 59 57 } … … 68 66 foreach($Data as $Key => $Value) 69 67 { 70 $Value = strtr($Value, '"', '\"'); 71 if(!in_array($Value, $this->Functions)) $Value = '"'.$Value.'"'; 68 if(!in_array($Value, $this->Functions)) $Value = '"'.$this->real_escape_string($Value).'"'; 72 69 $Name .= ',`'.$Key.'`'; 73 70 $Values .= ','.$Value;
Note:
See TracChangeset
for help on using the changeset viewer.