Changeset 10942 for extensions/UserAdvManager/trunk/maintain.inc.php

Timestamp:

May 19, 2011, 5:28:40 PM (13 years ago)

Author:

Eric

Message:

use pwg_db_real_escape_string() instead of addslashes()
version 2.20.7 hard coded

File:

• extensions/UserAdvManager/trunk/maintain.inc.php (modified) (2 diffs)

extensions/UserAdvManager/trunk/maintain.inc.php

@@ -35 +35 @@
     $q = '
 INSERT INTO '.CONFIG_TABLE.' (param, value, comment)
-VALUES ("UserAdvManager","'.addslashes(serialize($default1)).'","UAM parameters")
+VALUES ("UserAdvManager","'.pwg_db_real_escape_string(serialize($default1)).'","UAM parameters")
   ;';
     pwg_query($q);
@@ -62 +62 @@
     $q = '
 INSERT INTO '.CONFIG_TABLE.' (param, value, comment)
-VALUES ("UserAdvManager_ConfirmMail","'.addslashes(serialize($default2)).'","UAM ConfirmMail parameters")
+VALUES ("UserAdvManager_ConfirmMail","'.pwg_db_real_escape_string(serialize($default2)).'","UAM ConfirmMail parameters")
   ;';
     pwg_query($q);