This commit is contained in:
Andre Cianfarani 2006-03-15 15:39:50 +00:00
parent db793148c8
commit 77e06014f4

View File

@ -111,7 +111,7 @@ class Categorie
} }
$sql = "INSERT INTO ".MAIN_DB_PREFIX."categorie (label, description) "; $sql = "INSERT INTO ".MAIN_DB_PREFIX."categorie (label, description) ";
$sql .= "VALUES ('".str_replace("'","''",$this->label)."', '".$this->description."')"; $sql .= "VALUES ('".str_replace("'","''",$this->label)."', '".str_replace("'","''",$this->description)."')";
$res = $this->db->query ($sql); $res = $this->db->query ($sql);
@ -172,10 +172,10 @@ class Categorie
} }
} }
$sql = "UPDATE ".MAIN_DB_PREFIX."categorie"; $sql = "UPDATE ".MAIN_DB_PREFIX."categorie";
$sql.= " SET label = '".trim($this->label)."'"; $sql.= " SET label = '".trim(str_replace("'","''",$this->label))."'";
if (strlen (trim($this->description)) > 0) if (strlen (trim($this->description)) > 0)
$sql .= ", description = '".trim($this->description)."'"; $sql .= ", description = '".trim(str_replace("'","''",$this->description))."'";
$sql .= " WHERE rowid = ".$this->id; $sql .= " WHERE rowid = ".$this->id;
if ($this->db->query($sql)) if ($this->db->query($sql))