attempt fix db_escape_string() invocation in sessions.php

master
Andrew Dolgov 12 years ago
parent d4a5129a24
commit 0295919648

@ -41,13 +41,17 @@ function db_connect($host, $user, $pass, $db) {
}
}
function db_escape_string($s, $strip_tags = true) {
function db_escape_string($s, $strip_tags = true, $link = NULL) {
if ($strip_tags) $s = strip_tags($s);
if (DB_TYPE == "pgsql") {
return pg_escape_string($s);
if ($link) {
return pg_escape_string($link, $s);
} else {
return pg_escape_string($s);
}
} else {
return mysql_real_escape_string($s);
return mysql_real_escape_string($s, $link);
}
}

@ -53,7 +53,7 @@
$expire = time() + $session_expire;
$data = db_escape_string(base64_encode($data), $session_connection);
$data = db_escape_string(base64_encode($data), false, $session_connection);
if ($session_read) {
$query = "UPDATE ttrss_sessions SET data='$data',

Loading…
Cancel
Save