use mysql_real_escape_string if existing

diff --git a/include/db/mysql.inc.php b/include/db/mysql.inc.php
index f65658d5d892ea7c9888a1b7f28822e1cc00781c..25332317cea2a30a8b7e79a42132690374e78168 100644 (file)
--- a/include/db/mysql.inc.php
+++ b/include/db/mysql.inc.php
@@ -197,7 +197,13 @@ function serendipity_db_matched_rows() {
  * @return  string   output string
  */
 function serendipity_db_escape_string($string) {
-    return mysql_escape_string($string);
+    global $serendipity;
+
+    if (is_resource($serendipity['dbConn']) && function_exists('mysql_real_escape_string')) {
+        return mysql_real_escape_string($string, $serendipity['dbConn']);
+    } else {
+        return mysql_escape_string($string);
+    }
 }
 
 /**