[Qual] Mysqli: escape with the proper method

2015-12-17 21:53:09 +01:00 · 2015-12-17 21:53:09 +01:00 · aeb3935e31
commit aeb3935e31
parent 87762f14b5
1 changed files with 1 additions and 1 deletions
--- a/htdocs/core/db/mysqli.class.php
+++ b/htdocs/core/db/mysqli.class.php
@ -378,7 +378,7 @@ class DoliDBMysqli extends DoliDB
     */
    function escape($stringtoencode)
    {
-        return addslashes($stringtoencode);
+        return $this->db->real_escape_string($stringtoencode);
    }

    /**