addslashes() did escape also single quotes (') which breaks some banner rotation...

[mailer.git] / inc / language-functions.php

diff --git a/inc/language-functions.php b/inc/language-functions.php
index cb1f925dbcb9a016f1cbd89d9f164312573bef82..479848e75c1782dbc00fe61e309d0d86b116dcc2 100644 (file)
--- a/inc/language-functions.php
+++ b/inc/language-functions.php
@@ -122,8 +122,8 @@ function getLanguage () {
 
 // "Setter" for language
 function setLanguage ($lang) {
 
 // "Setter" for language
 function setLanguage ($lang) {

-       // Accept only first 2 chars!
-       $lang = substr(SQL_ESCAPE(secureString($lang)), 0, 2);
+       // Accept only first 2 chars and still secure them
+       $lang = substr(secureString($lang), 0, 2);

 
        // Set cookie
        setSession('mx_lang', $lang);
 
        // Set cookie
        setSession('mx_lang', $lang);