diff --git a/phpBB/db/mysql.php b/phpBB/db/mysql.php index 256a7361ad..cf86637b29 100644 --- a/phpBB/db/mysql.php +++ b/phpBB/db/mysql.php @@ -381,7 +381,8 @@ class sql_db function sql_escape($msg) { - return mysql_escape_string($msg); + return str_replace("'", "''", str_replace('\\', '\\\\', $msg)); +// return mysql_escape_string($msg); } function sql_error($sql = '') diff --git a/phpBB/db/mysql4.php b/phpBB/db/mysql4.php index 1c75cf7139..0742f0966e 100644 --- a/phpBB/db/mysql4.php +++ b/phpBB/db/mysql4.php @@ -381,7 +381,8 @@ if (!empty($_REQUEST['explain'])) function sql_escape($msg) { - return mysql_escape_string($msg); + return str_replace("'", "''", str_replace('\\', '\\\\', $msg)); +// return mysql_escape_string($msg); } function sql_error($sql = '')