added stripslashes to mysqli_real_escape_string

exponentcms · Jul 7, 2011 · d08e5cd · d08e5cd
1 parent ac22aab
commit d08e5cd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/formbuilder/actions/submit_form.php b/modules/formbuilder/actions/submit_form.php
@@ -51,9 +51,9 @@
         //$value = mysql_escape_string($emailValue);
 
         if (DB_ENGINE=='mysqli') {
-            $value = mysqli_real_escape_string($db->connection,$emailValue);
+            $value = stripslashes(mysqli_real_escape_string($db->connection,$emailValue));
         } elseif(DB_ENGINE=='mysql') {
-            $value = mysql_real_escape_string($emailValue,$db->connection);
+            $value = stripslashes(mysql_real_escape_string($emailValue,$db->connection));
         } else {
             $value = $emailValue;
         }