#1882 escaping added

This commit is contained in:
tomash 2006-10-20 16:30:18 +00:00
parent 01bc3e4905
commit 39ee84d0f3
1 changed files with 4 additions and 2 deletions

View File

@ -65,12 +65,13 @@ class TransportRecord
$names .= ", $k";
$values .= ", $sqlVal";
}
$res = $r = $trec->dbc->query("
$query = "
INSERT INTO {$trec->transTable}
($names)
VALUES
($values)
");
";
$res = $r = $trec->dbc->query($query);
if (PEAR::isError($r)) {
return $r;
}
@ -316,6 +317,7 @@ class TransportRecord
return "x'$fldVal'::bigint";
break;
default:
$fldVal = pg_escape_string($fldVal);
return "'$fldVal'";
break;
}