Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
hi
I have just seen your function called str
I think , it is a good idea to use the function mysqli::real_escape_string($str);
if (get_magic_quotes_gpc()) {
$str=mysqli::real_escape_string($str);
/* $str=str_replace('"','"',$str);
$str=str_replace("'","'",$str);
$str=str_replace('\\','\',$str);*/
}
i modified and it seems that works properly
thanks
Yes, that works ...
... on MySql database, with mysqli plugin enabled.
But ProjeQtOr is also compatible with PosgreSql, so mysqli functions cannot be generalized.
Moreover, a security leak will be fixed in V4.3, that is not taken into account by mysqli::real_escape_string.