From: garvinhicking <garvinhicking>
Date: Wed, 25 Jan 2006 09:39:41 +0000 (+0000)
Subject: use mysql_real_escape_string if existing
X-Git-Tag: 1.0~148
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=676c7bc7130f5e465fbdc6add61350889dcdb508;p=s9y.git

use mysql_real_escape_string if existing
---

diff --git a/include/db/mysql.inc.php b/include/db/mysql.inc.php
index f65658d..2533231 100644
--- a/include/db/mysql.inc.php
+++ b/include/db/mysql.inc.php
@@ -197,7 +197,13 @@ function serendipity_db_matched_rows() {
  * @return  string   output string
  */
 function serendipity_db_escape_string($string) {
-    return mysql_escape_string($string);
+    global $serendipity;
+
+    if (is_resource($serendipity['dbConn']) && function_exists('mysql_real_escape_string')) {
+        return mysql_real_escape_string($string, $serendipity['dbConn']);
+    } else {
+        return mysql_escape_string($string);
+    }
 }
 
 /**