Add slashes instead of SQL_ESCAPE()

diff --git a/inc/functions.php b/inc/functions.php
index 5a3d215..25610ef 100644 (file)
--- a/inc/functions.php
+++ b/inc/functions.php
@@ -529,7 +529,7 @@ function loadEmailTemplate ($template, $content = array(), $UID = 0) {
                $GLOBALS['tpl_content'] = readFromFile($FQFN);
 
                // Run code
-               $GLOBALS['tpl_content'] = "\$newContent = decodeEntities(\"".compileCode($GLOBALS['tpl_content'])."\");";
+               $GLOBALS['tpl_content'] = "\$newContent = decodeEntities(\"".compileCode(smartAddSlashes($GLOBALS['tpl_content']))."\");";
                eval($GLOBALS['tpl_content']);
        } elseif (!empty($template)) {
                // Template file not found!