Migration to PDO database abstraction layer

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / smarty / node_methodz / function.get_nodes_by_parent.php

diff --git a/wwwroot/inc/smarty/node_methodz/function.get_nodes_by_parent.php b/wwwroot/inc/smarty/node_methodz/function.get_nodes_by_parent.php
index dc9c011cde8436451f34be8bfeee1a937e0eaebd..b392c5155012fa0637da8c127aec10794c08aa83 100644 (file)
--- a/wwwroot/inc/smarty/node_methodz/function.get_nodes_by_parent.php
+++ b/wwwroot/inc/smarty/node_methodz/function.get_nodes_by_parent.php
@@ -32,7 +32,7 @@ if ($params['time']) $sql_time=" nodes.node_created > '".addslashes($params['tim
                 if ($_POST['search_type']=='content')
                                         $sql_type.=" and node_content like '%".addslashes($_POST['node_content'])."%' ";
                else {
-                       $q2="select user_id from users where login='".mysql_real_escape_string($_POST['node_content'])."'";
+                       $q2="select user_id from users where login='".db_escape_string($_POST['node_content'])."'";
                        $userset=$db->query($q2);
                        $userset->next();
                        $id=$userset->getString('user_id');