[Qual] Mysqli: escape with the proper method
This commit is contained in:
parent
87762f14b5
commit
aeb3935e31
@ -378,7 +378,7 @@ class DoliDBMysqli extends DoliDB
|
|||||||
*/
|
*/
|
||||||
function escape($stringtoencode)
|
function escape($stringtoencode)
|
||||||
{
|
{
|
||||||
return addslashes($stringtoencode);
|
return $this->db->real_escape_string($stringtoencode);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user