Do not try to db_escape() an SQL field.

6 years ago · 0b66cd6bd2
parent 4e9d166765
commit 0b66cd6bd2
1 changed files with 2 additions and 1 deletions
--- a/functions.inc.php
+++ b/functions.inc.php
@ -1660,7 +1660,8 @@ function db_assoc($result) {
 */
 function db_delete($table, $where, $delete, $additionalwhere='') {
    $table = table_by_key($table);
-    $query = "DELETE FROM $table WHERE " . escape_string($where) . "='" . escape_string($delete) . "' " . $additionalwhere;
+
+    $query = "DELETE FROM $table WHERE $where ='" . escape_string($delete) . "' " . $additionalwhere;
    $result = db_query($query);

    if ($result['rows'] >= 1) {