[limb-svn] r6258 - 2.x/trunk/src/tree

svn at limb-project.com svn at limb-project.com
Mon Sep 3 16:20:42 MSD 2007


Author: 3dmax
Date: 2007-09-03 16:20:41 +0400 (Mon, 03 Sep 2007)
New Revision: 6258
URL: http://fisheye.limb-project.com/changelog/limb/?cs=6258

Modified:
   2.x/trunk/src/tree/materialized_path_tree.class.php
Log:
-- SQL-injection fix for different db drivers

Modified: 2.x/trunk/src/tree/materialized_path_tree.class.php
===================================================================
--- 2.x/trunk/src/tree/materialized_path_tree.class.php	2007-09-03 10:41:32 UTC (rev 6257)
+++ 2.x/trunk/src/tree/materialized_path_tree.class.php	2007-09-03 12:20:41 UTC (rev 6258)
@@ -501,10 +501,10 @@
     if(!$path)
       return $result;
 
+    $path = $this->_db->escape($path);
+
     $path_array = explode($delimiter, $path);
 
-    $path_array = array_map("mysql_escape_string", $path_array);
-
     if(end($path_array) == '')
       array_pop($path_array);
 



More information about the limb-svn mailing list