Changeset 11027 for extensions/hr_os_xl/admin/maintain.inc.php

Timestamp:

May 23, 2011, 10:41:40 PM (13 years ago)

Author:

flop25

Message:

pwg_db_real_escape_string

File:

• extensions/hr_os_xl/admin/maintain.inc.php (modified) (1 diff)

extensions/hr_os_xl/admin/maintain.inc.php

@@ -16 +16 @@
     $query = '
 INSERT INTO ' . CONFIG_TABLE . ' (param,value,comment)
-VALUES ("hr_os_xl" , "'.addslashes(serialize($config)).'" , "hr_os_xl parameters");';
+VALUES ("hr_os_xl" , "'.pwg_db_real_escape_string(serialize($config)).'" , "hr_os_xl parameters");';
 
     pwg_query($query);