Added get_magic_quotes_gpc on db connectors

wakdev · May 13, 2013 · c556291 · c556291
1 parent 986f4fb
commit c556291
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 3 deletions.
diff --git a/core/common/class/db/mysql/connector.php b/core/common/class/db/mysql/connector.php
@@ -228,7 +228,11 @@ public function quote($value,$real_escape=false){
 	 * @return string the escaped string
 	 */
 	public function escape($value,$real_escape=false){
-		return $real_escape?mysql_real_escape_string($value,getHandle()):mysql_escape_string($value);
+		if (!get_magic_quotes_gpc()) {
+			return $real_escape?mysql_real_escape_string($value,getHandle()):mysql_escape_string($value);
+		}else{
+			return $value;
+		}
 	}
 
 	/**

diff --git a/core/common/class/db/mysqli/connector.php b/core/common/class/db/mysqli/connector.php
@@ -219,7 +219,11 @@ public function quote($value,$real_escape=false){
 	 * @return string the escaped string
 	 */
 	public function escape($value,$real_escape=false){
-		return $this->mysqli->real_escape_string($value);
+		if (!get_magic_quotes_gpc()) {
+			return $this->mysqli->real_escape_string($value);
+		}else{
+			return $value;
+		}
 	}
 
 	/**

diff --git a/core/common/class/db/pdo/connector.php b/core/common/class/db/pdo/connector.php
@@ -220,7 +220,11 @@ public function quote($value,$real_escape=false){
 	public function escape($value,$real_escape=false){
 		//quote the value with PDO::quote() function then
 		//remove enclosing quotes to conform "escape" protocol
-		return substr($this->_db_handle->quote($value),1,-1);
+		if (!get_magic_quotes_gpc()) {
+			return substr($this->_db_handle->quote($value),1,-1);
+		}else{
+			return $value;
+		}
 	}
 
 	/**