X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Frequest-functions.php;h=7f15d42b50ef443093f49c74263f1f4a13786ac6;hp=85f7883078a5f5226e8435369198b3957897cff7;hb=4373e155854012d687fdfcae4c69d1a940883fab;hpb=e1cd186da2a81cc415869c95d4b8c45d7dc07ab3 diff --git a/inc/request-functions.php b/inc/request-functions.php index 85f7883078..7f15d42b50 100644 --- a/inc/request-functions.php +++ b/inc/request-functions.php @@ -10,13 +10,8 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Spezialle Funktionen fuer die Anfragebehandlung * * -------------------------------------------------------------------- * - * $Revision:: $ * - * $Date:: $ * - * $Tag:: 0.2.1-FINAL $ * - * $Author:: $ * - * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2009 by Roland Haeder * - * Copyright (c) 2009 - 2012 by Mailer Developer Team * + * Copyright (c) 2009 - 2013 by Mailer Developer Team * * For more information visit: http://mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -57,7 +52,7 @@ function getRequestElement ($element) { $value = $GLOBALS['cache_request']['get'][$element]; } elseif (isGetRequestElementSet($element)) { // Then get it directly - $value = SQL_ESCAPE($GLOBALS['raw_request']['get'][$element]); + $value = sqlEscapeString($GLOBALS['raw_request']['get'][$element]); // Store it in cache $GLOBALS['cache_request']['get'][$element] = $value; @@ -107,8 +102,8 @@ function countRequestGet () { // Setter for element in $_GET function setGetRequestElement ($element, $value) { // Escape both - $element = SQL_ESCAPE($element); - $value = SQL_ESCAPE($value); + $element = sqlEscapeString($element); + $value = sqlEscapeString($value); // Set in $_GET $GLOBALS['raw_request']['get'][$element] = $value; @@ -135,11 +130,11 @@ function postRequestElement ($element, $subElement = NULL) { // Is $subElement set? if ((!is_null($subElement)) && (isPostRequestElementSet($element, $subElement))) { // Then use this - $value = SQL_ESCAPE($value[$subElement]); + $value = sqlEscapeString($value[$subElement]); //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',subElement=' . $subElement . ' - SUB!'); - } elseif (!is_array($value)) { + } elseif ((!is_array($value)) && (function_exists('sqlEscapeString'))) { // Escape it here - $value = SQL_ESCAPE($value); + $value = sqlEscapeString($value); //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ' - REGULAR!'); } @@ -218,13 +213,13 @@ function setPostRequestElement ($element, $value) { $eval .= implode("']['", $element); // Finish eval() command - $eval .= sprintf("'] = \"%s\";", SQL_ESCAPE($value)); + $eval .= sprintf("'] = \"%s\";", sqlEscapeString($value)); // And run it eval($eval); } elseif (is_array($value)) { // Escape element - $element = SQL_ESCAPE($element); + $element = sqlEscapeString($element); // Value is an array so set it directly $GLOBALS['raw_request']['post'][$element] = $value; @@ -233,8 +228,8 @@ function setPostRequestElement ($element, $value) { //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',value=' . $value . ' - BEFORE!'); // Escape both - $element = SQL_ESCAPE($element); - $value = SQL_ESCAPE($value); + $element = sqlEscapeString($element); + $value = sqlEscapeString($value); // Debug message //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',value=' . $value . ' - AFTER!'); @@ -273,7 +268,7 @@ function addAllGetRequestParameters () { // Now add all parameters foreach (getRequestArray() as $key => $value) { // Add it secured - $return .= SQL_ESCAPE($key) . '=' . SQL_ESCAPE($value) . '&'; + $return .= sqlEscapeString($key) . '=' . sqlEscapeString($value) . '&'; } // END - foreach // Remove trailing &