Changeset 9113 for extensions/AMenuManager/amm_root.class.inc.php

Timestamp:

Feb 7, 2011, 11:53:52 PM (13 years ago)

Author:

grum

Message:

release 3.0.3
fix bug:2166,bug:2182

File:

• extensions/AMenuManager/amm_root.class.inc.php (modified) (6 diffs)

extensions/AMenuManager/amm_root.class.inc.php

@@ -239 +239 @@
       $sql="INSERT INTO ".$this->tables['urls']." VALUES
             ('',
-             '".pwg_db_real_escape_string($label)."',
-             '".pwg_db_real_escape_string($url)."',
+             '".$label."',
+             '".$url."',
              '$mode',
              '$icon',
@@ -252 +252 @@
     {
       $sql="UPDATE ".$this->tables['urls']."
-            SET label='".pwg_db_real_escape_string($label)."',
-                url='".pwg_db_real_escape_string($url)."',
+            SET label='".$label."',
+                url='".$url."',
                 mode='$mode',
                 icon='$icon',
                 visible='$visible',
-                accessUsers='".pwg_db_real_escape_string($accessUsers)."',
-                accessGroups='".pwg_db_real_escape_string($accessGroups)."'
+                accessUsers='".$accessUsers."',
+                accessGroups='".$accessGroups."'
             WHERE id='$id';";
     }
@@ -445 +445 @@
             ('',
              '$visible',
-             '".pwg_db_real_escape_string($nfo)."'
+             '".$nfo."'
             );";
       $result=pwg_query($sql);
@@ -455 +455 @@
       $sql="UPDATE ".$this->tables['personalised']."
             SET visible='$visible',
-                nfo='".pwg_db_real_escape_string($nfo)."'
+                nfo='".$nfo."'
             WHERE id='$id';";
       $result=pwg_query($sql);
@@ -475 +475 @@
         $values[]="('$id',
                     '".$lang['lang']."',
-                    '".pwg_db_real_escape_string($lang['title'])."',
-                    '".pwg_db_real_escape_string($lang['content'])."')";
+                    '".$lang['title']."',
+                    '".$lang['content']."')";
       }
       $sql="INSERT INTO ".$this->tables['personalised_langs']." VALUES ".implode(',', $values);
@@ -632 +632 @@
     {
       $sql="INSERT INTO ".$this->tables['blocks']." VALUES (
-            '".pwg_db_real_escape_string($block['id'])."',
+            '".$block['id']."',
             '".$block['order']."',
-            '".pwg_db_real_escape_string(implode(',', $block['users']))."',
-            '".pwg_db_real_escape_string(implode(',', $block['groups']))."'
+            '".implode(',', $block['users'])."',
+            '".implode(',', $block['groups'])."'
             );";
       $result=pwg_query($sql);