diff --git a/phpBB/db/msaccess.php b/phpBB/db/msaccess.php index 33fb8e8863..6675581081 100644 --- a/phpBB/db/msaccess.php +++ b/phpBB/db/msaccess.php @@ -154,7 +154,7 @@ class sql_db } else if( eregi("^INSERT ", $query) ) { - $this->result = odbc_exec($this->db_connect_id, str_replace("\'", "''", $query)); + $this->result = odbc_exec($this->db_connect_id, $query); if( $this->result ) { @@ -171,7 +171,7 @@ class sql_db } else { - $this->result = odbc_exec($this->db_connect_id, str_replace("\'", "''", $query)); + $this->result = odbc_exec($this->db_connect_id, $query); if( $this->result ) { diff --git a/phpBB/db/mssql-odbc.php b/phpBB/db/mssql-odbc.php index 68774f8659..ab9f887f55 100644 --- a/phpBB/db/mssql-odbc.php +++ b/phpBB/db/mssql-odbc.php @@ -151,7 +151,7 @@ class sql_db } else if( eregi("^INSERT ", $query) ) { - $this->result = odbc_exec($this->db_connect_id, str_replace("\'", "''", $query)); + $this->result = odbc_exec($this->db_connect_id, $query); if( $this->result ) { @@ -168,7 +168,7 @@ class sql_db } else { - $this->result = odbc_exec($this->db_connect_id, str_replace("\'", "''", $query)); + $this->result = odbc_exec($this->db_connect_id, $query); if( $this->result ) { diff --git a/phpBB/db/mssql.php b/phpBB/db/mssql.php index e16e8ce710..52ae9c8a84 100644 --- a/phpBB/db/mssql.php +++ b/phpBB/db/mssql.php @@ -150,7 +150,7 @@ class sql_db } else if( eregi("^INSERT ", $query) ) { - if( mssql_query(str_replace("\'", "''", $query), $this->db_connect_id) ) + if( mssql_query($query, $this->db_connect_id) ) { $this->result = time() + microtime(); @@ -167,7 +167,7 @@ class sql_db } else { - if( mssql_query(str_replace("\'", "''", $query), $this->db_connect_id) ) + if( mssql_query($query, $this->db_connect_id) ) { $this->result = time() + microtime();