From e1fa9607756621df38c17108742cc27d55397e09 Mon Sep 17 00:00:00 2001 From: Sam Minnee Date: Wed, 8 Jul 2009 23:05:01 +0000 Subject: [PATCH] MINOR: Replaced mysql_escape_string() with mysql_real_escape_string() git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@81382 467b73ca-7a2a-4603-9d3b-597d59a354a9 --- core/model/MySQLDatabase.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/model/MySQLDatabase.php b/core/model/MySQLDatabase.php index 8b6488fa5..237219dab 100644 --- a/core/model/MySQLDatabase.php +++ b/core/model/MySQLDatabase.php @@ -826,7 +826,7 @@ class MySQLDatabase extends Database { * Using PHP's addslashes method won't work in MSSQL */ function addslashes($value){ - return mysql_escape_string($value); + return mysql_real_escape_string($value, $this->dbConn); } /*