Merge from trunk 2752:

- change mysql_escape_string function (deprecated) by mysql_real_escape_string.
- Correction on install.tpl (link color).

git-svn-id: http://piwigo.org/svn/branches/2.0@2753 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
patdenice
2008-10-15 20:58:36 +00:00
parent 478291598f
commit 3e49cf5f56
7 changed files with 8 additions and 15 deletions
+2 -2
View File
@@ -115,7 +115,7 @@ SELECT MAX('.$conf['user_fields']['id'].') + 1
$insert =
array(
$conf['user_fields']['id'] => $next_id,
$conf['user_fields']['username'] => mysql_escape_string($login),
$conf['user_fields']['username'] => mysql_real_escape_string($login),
$conf['user_fields']['password'] => $conf['pass_convert']($password),
$conf['user_fields']['email'] => $mail_address
);
@@ -716,7 +716,7 @@ function get_userid($username)
{
global $conf;
$username = mysql_escape_string($username);
$username = mysql_real_escape_string($username);
$query = '
SELECT '.$conf['user_fields']['id'].'