提交: 69e2cfb9d707c4ab8af89ef8769d02fd0672fa57 - xoopscubelegacy (git)

XOOPS Cube Legacy base repository

Commit MetaInfo

• 修訂: 69e2cfb9d707c4ab8af89ef8769d02fd0672fa57 (tree)
• 時間: 2009-03-21 13:18:28
• 作者: mumincacao <mumincacao@704c...>
• Commiter: mumincacao

Log Message

Fix Bug #2699408 - Specify 2nd argument of mysql_real_escape_string().

git-svn-id: https://xoopscube.svn.sourceforge.net/svnroot/xoopscube/Package_Legacy/trunk@102 704cf05f-ae62-4b0e-a484-234ee0250e75

Change Summary

• modified: docs/CHANGES.txt
• modified: html/class/database/mysqldatabase.php

差異

--- a/docs/CHANGES.txt
+++ b/docs/CHANGES.txt
@@ -15,6 +15,7 @@ XOOPS Cube Legacy "Package_Legacy" & "XCube core" Changelog
 - Fix Bug #2690736 - typo: X_ITEM_TILE (X_ITEM_TITLE?) default_notify.tpl
 - Fix Bug #2690739 - typo in /install/include/functions.php, line 38
 - Fix Bug #2696701 - user_lostpass.html email maxlength too short
+- Fix Bug #2699408 - Specify 2nd argument of mysql_real_escape_string().
 
 [Bug Fix - From "XCube" Bug Tracker]
 - Fix Bug #2656854 - XC_CLASS_EXISTS loops infinity.

--- a/html/class/database/mysqldatabase.php
+++ b/html/class/database/mysqldatabase.php
@@ -220,7 +220,7 @@ class XoopsMySQLDatabase extends XoopsDatabase
      */
     function quoteString($str)
     {
-         $str = "'".mysql_real_escape_string($str)."'";
+         $str = "'".mysql_real_escape_string($str, $this->conn)."'";
          return $str;
     }