Guess what? ... yep, it's those \' again

git-svn-id: file:///svn/phpbb/trunk@1688 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2001-12-24 13:30:34 +00:00
parent a4f664e581
commit 50d58b947b

View file

@ -151,10 +151,8 @@ if( isset($HTTP_GET_VARS['import_pack']) || isset($HTTP_POST_VARS['import_pack']
if( !empty($replace_existing) ) if( !empty($replace_existing) )
{ {
$sql = "UPDATE " . SMILIES_TABLE . " $sql = "UPDATE " . SMILIES_TABLE . "
SET smile_url = '$smile_data[0]', SET smile_url = '" . str_replace("\'", "''", $smile_data[0]) . "', emoticon = '" . str_replace("\'", "''", $smile_data[1]) . "'
emoticon = '$smile_data[1]' WHERE code = '" . str_replace("\'", "''", $smile_data[$j]) . "'";
WHERE code = '$smile_data[$j]'";
} }
else else
{ {
@ -163,15 +161,8 @@ if( isset($HTTP_GET_VARS['import_pack']) || isset($HTTP_POST_VARS['import_pack']
} }
else else
{ {
$sql = "INSERT INTO " . SMILIES_TABLE . " ( $sql = "INSERT INTO " . SMILIES_TABLE . " (code, smile_url, emoticon)
code, VALUES('" . str_replace("\'", "''", $smile_data[$j]) . "', '" . str_replace("\'", "''", $smile_data[0]) . "', '" . str_replace("\'", "''", $smile_data[1]) . "')";
smile_url,
emoticon )
VALUES(
'$smile_data[$j]',
'$smile_data[0]',
'$smile_data[1]')";
} }
if( $sql != '' ) if( $sql != '' )
@ -410,7 +401,7 @@ else if ( $mode != "" )
// Proceed with updating the smiley table. // Proceed with updating the smiley table.
// //
$sql = "UPDATE " . SMILIES_TABLE . " $sql = "UPDATE " . SMILIES_TABLE . "
SET code = '$smile_code', smile_url = '$smile_url', emoticon = '$smile_emotion' SET code = '" . str_replace("\'", "''", $smile_code) . "', smile_url = '" . str_replace("\'", "''", $smile_url) . "', emoticon = '" . str_replace("\'", "''", $smile_emotion) . "'
WHERE smilies_id = $smile_id"; WHERE smilies_id = $smile_id";
$result = $db->sql_query($sql); $result = $db->sql_query($sql);
if( !$result ) if( !$result )
@ -440,7 +431,7 @@ else if ( $mode != "" )
// Save the data to the smiley table. // Save the data to the smiley table.
// //
$sql = "INSERT INTO " . SMILIES_TABLE . " (code, smile_url, emoticon) $sql = "INSERT INTO " . SMILIES_TABLE . " (code, smile_url, emoticon)
VALUES ('$smile_code', '$smile_url', '$smile_emotion')"; VALUES ('" . str_replace("\'", "''", $smile_code) . "', '" . str_replace("\'", "''", $smile_url) . "', '" . str_replace("\'", "''", $smile_emotion) . "')";
$result = $db->sql_query($sql); $result = $db->sql_query($sql);
if( !$result ) if( !$result )
{ {