X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;ds=sidebyside;f=wwwroot%2Finc%2Feventz%2Fconfigure_content.inc;h=27a43d98beab4a1bef4b9917aa9b53ed74bc3eba;hb=b5bf04a3b95468d37a95df63e2c7823f03b0b39b;hp=0d089a9640a2b682b8d5b1657fb2c9c4950b5abb;hpb=51ff32267c4949bad6a8dddc502cbc01ed56edc8;p=mirrors%2FKyberia-bloodline.git
diff --git a/wwwroot/inc/eventz/configure_content.inc b/wwwroot/inc/eventz/configure_content.inc
index 0d089a9..27a43d9 100644
--- a/wwwroot/inc/eventz/configure_content.inc
+++ b/wwwroot/inc/eventz/configure_content.inc
@@ -14,7 +14,7 @@ function configure_content() {
$params['node_creator'] = UBIK_ID;
$params['node_parent'] = WARNING_ZONE;
$params['node_name'] = "node $node_id configured as code";
- $params['node_content'] = mysql_real_escape_string("node $node_id added as code by user ".$_SESSION['user_name']);
+ $params['node_content'] = db_escape_string("node $node_id added as code by user ".$_SESSION['user_name']);
unset($_POST['code']);
nodes::addNode($params);
}
@@ -33,11 +33,12 @@ function configure_content() {
node_descendant_count,lastdescendant_created,template_id, NOW()
from nodes where node_id = '$node_id'";
$db->query($qtiamat);
- $qu = "update nodes set node_content = '$node_content' where node_id = '$node_id'";
+
+ $qu = "update nodes set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
$result = $db->update($qu);
- $qu2 = "update node_content set node_content = '$node_content' where node_id = '$node_id'";
+ $qu2 = "update node_content set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
$result = $db->update($qu2);
return true;
}
-?>
\ No newline at end of file
+?>