La fonction addslashes est plus portable que mysql_real_escape_string
This commit is contained in:
parent
e86efa925e
commit
bc1041dd70
@ -123,7 +123,7 @@ class Fichinter
|
||||
*/
|
||||
$sql = "UPDATE ".MAIN_DB_PREFIX."fichinter SET ";
|
||||
$sql .= " datei = $this->date";
|
||||
$sql .= ", note = '".mysql_real_escape_string($this->note)."'";
|
||||
$sql .= ", note = '".addslashes($this->note)."'";
|
||||
$sql .= ", duree = $this->duree";
|
||||
$sql .= ", fk_projet = $this->projet_id";
|
||||
$sql .= " WHERE rowid = $id";
|
||||
|
||||
Loading…
Reference in New Issue
Block a user