diff options
| author | Remi Collet <fedora@famillecollet.com> | 2015-12-03 19:38:12 +0100 | 
|---|---|---|
| committer | Remi Collet <fedora@famillecollet.com> | 2015-12-03 19:38:12 +0100 | 
| commit | 3f6fa98c008a915e53f251792292e6983ec4fd1e (patch) | |
| tree | 97a68bb309f4668a9856ad839f7cf27b57f5b55e /class/CommonTable.php | |
| parent | db2d2d1f41ba372b825fd51ed65ed8c6f6fa4305 (diff) | |
fix previous
Diffstat (limited to 'class/CommonTable.php')
| -rw-r--r-- | class/CommonTable.php | 6 | 
1 files changed, 3 insertions, 3 deletions
diff --git a/class/CommonTable.php b/class/CommonTable.php index d8852c7..fcf9e23 100644 --- a/class/CommonTable.php +++ b/class/CommonTable.php @@ -121,7 +121,7 @@ abstract class CommonTable              } else if (is_numeric($value)) {                  $val[] = $value;              } else { -                $val[] = "'".$this->escape($value)."'"; +                $val[] = $this->escape($value);              }          }          $sql = "INSERT INTO `".$this->table."` (".implode(',', $col).") @@ -185,7 +185,7 @@ abstract class CommonTable              } else if (is_numeric($value)) {                  $sql .= '='.$value;              } else { -                $sql .= "='".$this->escape($value)."'"; +                $sql .= "=".$this->escape($value);              }              $link = "AND"; @@ -220,7 +220,7 @@ abstract class CommonTable              } else if (is_numeric($value)) {                  $sql .= $value;              } else { -                $sql .= "'".$this->escape($value)."'"; +                $sql .= $this->escape($value);              }              $link = ',';          }  | 
