X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Finc%2Feventz%2Fconfigure_content.inc;h=27a43d98beab4a1bef4b9917aa9b53ed74bc3eba;hb=8fc54d8f71a9ba9526cd396fe8f5c6f4764fb6c3;hp=0d089a9640a2b682b8d5b1657fb2c9c4950b5abb;hpb=51ff32267c4949bad6a8dddc502cbc01ed56edc8;p=mirrors%2FKyberia-bloodline.git

diff --git a/wwwroot/inc/eventz/configure_content.inc b/wwwroot/inc/eventz/configure_content.inc
index 0d089a9..27a43d9 100644
--- a/wwwroot/inc/eventz/configure_content.inc
+++ b/wwwroot/inc/eventz/configure_content.inc
@@ -14,7 +14,7 @@ function configure_content() {
         $params['node_creator'] = UBIK_ID;
         $params['node_parent'] = WARNING_ZONE;
         $params['node_name'] = "node $node_id configured as code";
-        $params['node_content'] = mysql_real_escape_string("node <a href=/id/$node_id>$node_id</a> added as code  by user ".$_SESSION['user_name']);
+        $params['node_content'] = db_escape_string("node <a href=/id/$node_id>$node_id</a> added as code  by user ".$_SESSION['user_name']);
         unset($_POST['code']);
         nodes::addNode($params);
     }
@@ -33,11 +33,12 @@ function configure_content() {
             node_descendant_count,lastdescendant_created,template_id, NOW()
             from nodes where node_id = '$node_id'";
     $db->query($qtiamat);
-    $qu = "update nodes set node_content = '$node_content' where node_id = '$node_id'";
+
+    $qu = "update nodes set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
     $result = $db->update($qu);
-    $qu2 = "update node_content set node_content = '$node_content' where node_id = '$node_id'";
+    $qu2 = "update node_content set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
     $result = $db->update($qu2);
 
     return true;
 }
-?>
\ No newline at end of file
+?>