Changeset 6654

Timestamp:

Jul 3, 2010, 2:20:38 PM (14 years ago)

Author:

nikrou

Message:

Bug 1755 : Needs single quotes in queries official plugins

Location:

trunk

Files:

• admin/include/functions_upgrade.php (modified) (2 diffs)
• include/functions_category.inc.php (modified) (1 diff)
• picture.php (modified) (1 diff)
• plugins/LocalFilesEditor/maintain.inc.php (modified) (2 diffs)
• plugins/c13y_upgrade/initialize.inc.php (modified) (1 diff)

trunk/admin/include/functions_upgrade.php

@@ -87 +87 @@
 SELECT id
 FROM '.PREFIX_TABLE.'plugins
-WHERE state = "active"
+WHERE state = \'active\'
 AND id NOT IN (\'' . implode('\',\'', $standard_plugins) . '\')
 ;';
@@ -102 +102 @@
     $query = '
 UPDATE '.PREFIX_TABLE.'plugins
-SET state="inactive"
+SET state=\'inactive\'
 WHERE id IN (\'' . implode('\',\'', $plugins) . '\')
 ;';

trunk/include/functions_category.inc.php

@@ -432 +432 @@
         $query='
 UPDATE '.OLD_PERMALINKS_TABLE.' SET last_hit=NOW(), hit=hit+1
-  WHERE permalink="'.$permalinks[$i].'" AND cat_id='.$cat_id.'
+  WHERE permalink=\''.$permalinks[$i].'\' AND cat_id='.$cat_id.'
   LIMIT 1';
         pwg_query($query);

trunk/picture.php

@@ -53 +53 @@
   {// url given by file name
     assert( !empty($page['image_file']) );
-    $query .= 'file LIKE "' .
+    $query .= 'file LIKE \'' .
       str_replace(array('_','%'), array('/_','/%'), $page['image_file'] ).
-      '.%" ESCAPE "/" LIMIT 1';
+      '.%\' ESCAPE \'/\' LIMIT 1';
   }
   if ( ! ( $row = pwg_db_fetch_assoc(pwg_query($query)) ) )

trunk/plugins/LocalFilesEditor/maintain.inc.php

@@ -28 +28 @@
   $query = '
 INSERT INTO ' . CONFIG_TABLE . ' (param,value,comment)
-VALUES ("LocalFilesEditor" , "off" , "LocalFiles Editor plugin parameters");';
+VALUES (\'LocalFilesEditor\' , \'off\' , \'LocalFiles Editor plugin parameters\');';
 
   pwg_query($query);
@@ -37 +37 @@
   global $prefixeTable;
 
-  $query = 'DELETE FROM ' . CONFIG_TABLE . ' WHERE param="LocalFilesEditor" LIMIT 1;';
+  $query = 'DELETE FROM ' . CONFIG_TABLE . ' WHERE param=\'LocalFilesEditor\' LIMIT 1;';
   pwg_query($query);
 }

trunk/plugins/c13y_upgrade/initialize.inc.php

@@ -48 +48 @@
   upper('.$conf['user_fields']['email'].')
 having count(*) > 1
-limit 0,1
+limit 1
 ;';