DB_escape_string

[weberp]

Would it be best to change the relevant ConnectDB file to just use the correct escape_string() function. That way whichever driver the user is using they will get the correct function?

Thanks
Tim

Yes, that is something that has to be done, in conjunction with other fixes. Doing it now will ensure entities are not going into the database which is good. But there will be code around that assumes entities are already taken care of when displaying to the browser, so will in fact not be once this is changed unless each is treated individually.

Hi Jo, can you give me an example so I can look into it?

thanks
Tim