[Weberp-cvs] SF.net SVN: web-erp:[2920] trunk

[<ja...@us...>]

Revision: 2920
          http://web-erp.svn.sourceforge.net/web-erp/?rev=2920&view=rev
Author:   javier7
Date:     2009-11-09 16:50:25 +0000 (Mon, 09 Nov 2009)

Log Message:
-----------
ConnectDB mysql, mysqli and postgres: Added SVN Property and Removed htmlspecialchars from function DB_escape_string.

Modified Paths:
--------------
    trunk/doc/Change.log.html
    trunk/includes/ConnectDB_mysql.inc
    trunk/includes/ConnectDB_mysqli.inc
    trunk/includes/ConnectDB_postgres.inc

Property Changed:
----------------
    trunk/includes/ConnectDB_mysql.inc
    trunk/includes/ConnectDB_mysqli.inc
    trunk/includes/ConnectDB_postgres.inc

Modified: trunk/doc/Change.log.html
===================================================================
--- trunk/doc/Change.log.html	2009-11-09 16:48:06 UTC (rev 2919)
+++ trunk/doc/Change.log.html	2009-11-09 16:50:25 UTC (rev 2920)
@@ -1,5 +1,6 @@
 <p><font SIZE=4 COLOR=BLUE><b>webERP Change Log</b></font></p>
 <p>
+<p>09/11/09 Javier: ConnectDB_mysql.inc v1.32 ConnectDB_mysqli.inc v1.21 and ConnectDB_postgres.inc v1.15 - Added Id and Removed htmlspecialchars at Line 139, 162 and 124
 <p>09/11/09 Javier: PO_Header.php - v1.33 Added gettext function at Line 544 and Id SVN Property.
 <p>09/11/09 Javier: messages.pot - update of gettext en_GB template file for translations.
 <p>09/11/09 Javier: CustomerReceipt.php - v1.46 Add in Id SVN Property.

Modified: trunk/includes/ConnectDB_mysql.inc
===================================================================
--- trunk/includes/ConnectDB_mysql.inc	2009-11-09 16:48:06 UTC (rev 2919)
+++ trunk/includes/ConnectDB_mysql.inc	2009-11-09 16:50:25 UTC (rev 2920)
@@ -1,6 +1,7 @@
 <?php
 
-/* $Revision: 1.31 $ */
+/* $Id$ */
+/* $Revision: 1.32 $ */
 
 define ('LIKE','LIKE');
 
@@ -136,7 +137,7 @@
 }
 
 function DB_escape_string($String){
-	return mysql_real_escape_string(htmlspecialchars($String, ENT_COMPAT, _('iso-8859-1')));
+	return mysql_real_escape_string($String);
 }
 
 function DB_show_tables(&$Conn){


Property changes on: trunk/includes/ConnectDB_mysql.inc
___________________________________________________________________
Added: svn:keywords
   + Id

Modified: trunk/includes/ConnectDB_mysqli.inc
===================================================================
--- trunk/includes/ConnectDB_mysqli.inc	2009-11-09 16:48:06 UTC (rev 2919)
+++ trunk/includes/ConnectDB_mysqli.inc	2009-11-09 16:50:25 UTC (rev 2920)
@@ -1,6 +1,7 @@
 <?php
 
-/* $Revision: 1.20 $ */
+/* $Id$ */
+/* $Revision: 1.21 $ */
 
 /* PeterMoulding.com
 20071102 Change from mysql to mysqli;
@@ -159,7 +160,7 @@
 
 function DB_escape_string($String){
 	global $db;
-	return mysqli_real_escape_string($db, htmlspecialchars($String, ENT_COMPAT, _('iso-8859-1')));
+	return mysqli_real_escape_string($db, $String);
 }
 
 function DB_show_tables(&$Conn){


Property changes on: trunk/includes/ConnectDB_mysqli.inc
___________________________________________________________________
Added: svn:keywords
   + Id

Modified: trunk/includes/ConnectDB_postgres.inc
===================================================================
--- trunk/includes/ConnectDB_postgres.inc	2009-11-09 16:48:06 UTC (rev 2919)
+++ trunk/includes/ConnectDB_postgres.inc	2009-11-09 16:50:25 UTC (rev 2920)
@@ -1,6 +1,7 @@
 <?php
 
-/* $Revision: 1.14 $ */
+/* $Id$ */
+/* $Revision: 1.15 $ */
 
 define ('LIKE','ILIKE');
 /* $PgConnStr = $PgConnStr = "host=".$host." dbname=".$_SESSION['DatabaseName']; */
@@ -121,7 +122,7 @@
 }
 
 function DB_escape_string($String){
-	Return pg_escape_string(htmlspecialchars($String, ENT_COMPAT, _('ISO-8859-1')));
+	Return pg_escape_string($String);
 }
 
 function INTERVAL( $val, $Inter ) {


Property changes on: trunk/includes/ConnectDB_postgres.inc
___________________________________________________________________
Added: svn:keywords
   + Id


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.