use raw db queries wherever query items could contain '%'
This commit is contained in:
parent
c50f491c3d
commit
f7c0480f1b
4 changed files with 13 additions and 3 deletions
|
@ -106,7 +106,7 @@ function dfrn_notify_post(&$a) {
|
|||
|
||||
dbesc_array($msg);
|
||||
|
||||
$r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg))
|
||||
$r = dbq("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg))
|
||||
. "`) VALUES ('" . implode("', '", array_values($msg)) . "')" );
|
||||
|
||||
// send email notification if requested.
|
||||
|
|
|
@ -249,7 +249,7 @@ function profiles_content(&$a) {
|
|||
|
||||
dbesc_array($r1[0]);
|
||||
|
||||
$r2 = q("INSERT INTO `profile` (`"
|
||||
$r2 = dbq("INSERT INTO `profile` (`"
|
||||
. implode("`, `", array_keys($r1[0]))
|
||||
. "`) VALUES ('"
|
||||
. implode("', '", array_values($r1[0]))
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue