Changeset 260 for quests/save.php

Timestamp:

Jan 21, 2008, 7:30:54 PM (17 years ago)

Author:

maron

Message:

paru oprav

File:

• quests/save.php (modified) (1 diff)

quests/save.php

@@ -9 +9 @@
   if (array_key_exists('entry', $_POST)) {
     
-    $entry = mysql_escape_string($_POST['entry']);  
-    $Title = mysql_escape_string($_POST['Title']);  
-    $Details = mysql_escape_string(@$_POST['Details']);
-    $Objectives = mysql_escape_string(@$_POST['Objectives']);
-    $OfferRewardText = mysql_escape_string(@$_POST['OfferRewardText']);
-    $RequestItemsText = mysql_escape_string(@$_POST['RequestItemsText']);
-    $EndText = mysql_escape_string(@$_POST['EndText']);
-    $ObjectiveText1 = mysql_escape_string(@$_POST['ObjectiveText1']);
-    $ObjectiveText2 = mysql_escape_string(@$_POST['ObjectiveText2']);
-    $ObjectiveText3 = mysql_escape_string(@$_POST['ObjectiveText3']);
-    $ObjectiveText4 = mysql_escape_string(@$_POST['ObjectiveText4']);
+    $entry = $_POST['entry'];  
+    $Title = $_POST['Title'];  
+    $Details = @$_POST['Details'];
+    $Objectives = @$_POST['Objectives'];
+    $OfferRewardText = @$_POST['OfferRewardText'];
+    $RequestItemsText = @$_POST['RequestItemsText'];
+    $EndText = @$_POST['EndText'];
+    $ObjectiveText1 = @$_POST['ObjectiveText1'];
+    $ObjectiveText2 = @$_POST['ObjectiveText2'];
+    $ObjectiveText3 = @$_POST['ObjectiveText3'];
+    $ObjectiveText4 = @$_POST['ObjectiveText4'];
 
-    $UserID = mysql_escape_string($_SESSION['UserID']);
-    $QuestID = mysql_escape_string($_POST['ID']);
-    $Language = mysql_escape_string($_POST['Language']);
+    $UserID = $_SESSION['UserID'];
+    $QuestID = $_POST['ID'];
+    $Language = $_POST['Language'];
     if (array_key_exists('End', $_POST))
       $complete = 1;