Ignore:
Timestamp:
Jun 17, 2010, 8:11:11 PM (14 years ago)
Author:
nikrou
Message:

Bug 1733 fixed : merge from trunk
single quotes in queries

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.1/admin/include/functions_upgrade.php

    r6131 r6551  
    8888FROM '.PREFIX_TABLE.'plugins
    8989WHERE state = "active"
    90 AND id NOT IN ("' . implode('","', $standard_plugins) . '")
     90AND id NOT IN (\'' . implode('\',\'', $standard_plugins) . '\')
    9191;';
    9292
     
    103103UPDATE '.PREFIX_TABLE.'plugins
    104104SET state="inactive"
    105 WHERE id IN ("' . implode('","', $plugins) . '")
     105WHERE id IN (\'' . implode('\',\'', $plugins) . '\')
    106106;';
    107107    pwg_query($query);
     
    163163SELECT password, status
    164164FROM '.USERS_TABLE.'
    165 WHERE username = "'.$username.'"
     165WHERE username = \''.$username.'\'
    166166;';
    167167  }
     
    173173INNER JOIN '.USER_INFOS_TABLE.' AS ui
    174174ON u.'.$conf['user_fields']['id'].'=ui.user_id
    175 WHERE '.$conf['user_fields']['username'].'="'.$username.'"
     175WHERE '.$conf['user_fields']['username'].'=\''.$username.'\'
    176176;';
    177177  }
Note: See TracChangeset for help on using the changeset viewer.