From 676c7bc7130f5e465fbdc6add61350889dcdb508 Mon Sep 17 00:00:00 2001
From: garvinhicking <garvinhicking>
Date: Wed, 25 Jan 2006 09:39:41 +0000
Subject: [PATCH] use mysql_real_escape_string if existing
---
include/db/mysql.inc.php | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/include/db/mysql.inc.php b/include/db/mysql.inc.php
index f65658d..2533231 100644
--- a/include/db/mysql.inc.php
+++ b/include/db/mysql.inc.php
@@ -197,7 +197,13 @@ function serendipity_db_matched_rows() {
* @return string output string
*/
function serendipity_db_escape_string($string) {
- return mysql_escape_string($string);
+ global $serendipity;
+
+ if (is_resource($serendipity['dbConn']) && function_exists('mysql_real_escape_string')) {
+ return mysql_real_escape_string($string, $serendipity['dbConn']);
+ } else {
+ return mysql_escape_string($string);
+ }
}
/**
--
2.39.5