Revision 1868
Added by Dietmar almost 12 years ago
| save.inc.php | ||
|---|---|---|
| 56 | 56 |
$template_permissions = implode (',', $template_permissions);
|
| 57 | 57 |
|
| 58 | 58 |
// prepare empty record to add new group |
| 59 |
$group_name = mysql_real_escape_string(strip_tags(trim($admin->get_post('name'))));
|
|
| 59 |
$group_name = $database->escapeString(strip_tags(trim($admin->get_post('name'))));
|
|
| 60 | 60 |
// print '<pre style="text-align: left;"><strong>function '.__FUNCTION__.'( '.''.' );</strong> basename: '.basename(__FILE__).' line: '.__LINE__.' -> <br />'; |
| 61 | 61 |
// print_r( $_POST ); print '</pre>'; |
| 62 | 62 |
|
Also available in: Unified diff
! change mysql_esc_string to WbDatabase::getInstance()->escapeStrinng()