Changeset 10979 for extensions/LCAS/trunk/admin

Timestamp:

May 21, 2011, 5:00:14 PM (13 years ago)

Author:

Eric

Message:

using conf_update_param() and pwg_db_real_escape_string()

File:

• extensions/LCAS/trunk/admin/LCAS_admin.php (modified) (2 diffs)

extensions/LCAS/trunk/admin/LCAS_admin.php

@@ -46 +46 @@
     $_POST['LCAS_MailText']);
 
-  $conf['LoginCaseAccentsSensitivity'] = serialize($newconf_LCAS);
-
-  $query = '
-    UPDATE '.CONFIG_TABLE.'
-    SET value="'.addslashes($conf['LoginCaseAccentsSensitivity']).'"
-    WHERE param="LoginCaseAccentsSensitivity"
-    LIMIT 1
-    ;';
-  
-  pwg_query($query);
+  conf_update_param('LoginCaseAccentsSensitivity', pwg_db_real_escape_string(serialize($newconf_LCAS)));
 
   array_push($page['infos'], l10n('LCAS_save_config'));
@@ -123 +114 @@
           $query = '
             UPDATE '.USERS_TABLE.'
-            SET username="'.addslashes($_POST['user-'.$lcas_UserToUpdate]).'"
+            SET username="'.pwg_db_real_escape_string($_POST['user-'.$lcas_UserToUpdate]).'"
             WHERE id='.$lcas_UserToUpdate.'
             LIMIT 1