Wavyzz/dolibarr
2
0
Fork 1
mirror of https://github.com/Dolibarr/dolibarr.git synced 2026-01-07 01:23:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix: compatibility with pgsql, replace all addslashes by $db->escape in other files

Browse Source
This commit is contained in:
Regis Houssin
2011-02-24 18:22:24 +00:00
parent 3b4ea76538
commit aba9bb9acd
42 changed files with 109 additions and 109 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/admin/external_rss.php
View File

@@ -86,7 +86,7 @@ if ($_POST["action"] == 'add' || $_POST["modify"])
{
// Ajoute boite box_external_rss dans definition des boites
$sql = "INSERT INTO ".MAIN_DB_PREFIX."boxes_def (file, note)";
$sql.= " VALUES ('box_external_rss.php','".addslashes($_POST["norss"].' ('.$_POST[$external_rss_title]).")')";
$sql.= " VALUES ('box_external_rss.php','".$db->escape($_POST["norss"].' ('.$_POST[$external_rss_title]).")')";
if (! $db->query($sql))
{
dol_print_error($db);