Migration to PDO database abstraction layer

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / eventz / configure_content.inc

diff --git a/wwwroot/inc/eventz/configure_content.inc b/wwwroot/inc/eventz/configure_content.inc
index 5d31e74c66f2667b7fc77c4f404ec3d467065008..27a43d98beab4a1bef4b9917aa9b53ed74bc3eba 100644 (file)
--- a/wwwroot/inc/eventz/configure_content.inc
+++ b/wwwroot/inc/eventz/configure_content.inc
@@ -14,7 +14,7 @@ function configure_content() {
         $params['node_creator'] = UBIK_ID;
         $params['node_parent'] = WARNING_ZONE;
         $params['node_name'] = "node $node_id configured as code";
-        $params['node_content'] = mysql_real_escape_string("node <a href=/id/$node_id>$node_id</a> added as code  by user ".$_SESSION['user_name']);
+        $params['node_content'] = db_escape_string("node <a href=/id/$node_id>$node_id</a> added as code  by user ".$_SESSION['user_name']);
         unset($_POST['code']);
         nodes::addNode($params);
     }
@@ -34,11 +34,11 @@ function configure_content() {
             from nodes where node_id = '$node_id'";
     $db->query($qtiamat);
 
-    $qu = "update nodes set node_content = '".mysql_real_escape_string($node_content)."' where node_id = '$node_id'";
+    $qu = "update nodes set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
     $result = $db->update($qu);
-    $qu2 = "update node_content set node_content = '".mysql_real_escape_string($node_content)."' where node_id = '$node_id'";
+    $qu2 = "update node_content set node_content = '".db_escape_string($node_content)."' where node_id = '$node_id'";
     $result = $db->update($qu2);
 
     return true;
 }
-?>
\ No newline at end of file
+?>