La fonction addslashes est plus portable que mysql_real_escape_string

This commit is contained in:
Laurent Destailleur 2005-11-15 22:42:00 +00:00
parent e86efa925e
commit bc1041dd70

View File

@ -123,7 +123,7 @@ class Fichinter
*/
$sql = "UPDATE ".MAIN_DB_PREFIX."fichinter SET ";
$sql .= " datei = $this->date";
$sql .= ", note = '".mysql_real_escape_string($this->note)."'";
$sql .= ", note = '".addslashes($this->note)."'";
$sql .= ", duree = $this->duree";
$sql .= ", fk_projet = $this->projet_id";
$sql .= " WHERE rowid = $id";