mysql_escape_string deprecated and replaced by mysql_real_escape_string

[sql-web.git] / lib / joe / joe.lib.php

diff --git a/lib/joe/joe.lib.php b/lib/joe/joe.lib.php
index 0bf1fb034a21da6178ebc1383827eb6597b024d3..93bfc219bf5ab8e69f0b5ffefa34c7e721a34289 100644 (file)
--- a/lib/joe/joe.lib.php
+++ b/lib/joe/joe.lib.php
@@ -2,12 +2,6 @@
 /*
     (c) 2005 Joe Presbrey
     joepresbrey@gmail.com
-
-    ATTN:  This library was assembled and completed in its entirety independent of
-    any and all corporate projects and/or work environ.
-
-    You may NOT use this library elsewhere!
-
 */
 
 function isPost() {
@@ -80,7 +74,6 @@ function sessTime($query=null) {
 }
 
 function fetchRows($rs, $key = null) {
-    /* ask me how to use this if its not obvious ~ Joe */
     if (!$rs) return array();
     $kn = is_null($key);
     $n = mysql_num_rows($rs);
@@ -131,7 +124,7 @@ function buildSQLSet($fields, $values=null) {
     if (!is_null($values)) {
         foreach($fields as $field) {
             if ($c++) $sql .= ',';
-            $sql .= " `$field`='".mysql_escape_string(array_shift($values))."'";
+            $sql .= " `$field`='".mysql_real_escape_string(array_shift($values))."'";
         }
     } else {
         foreach($fields as $field=>$value) {
@@ -139,7 +132,7 @@ function buildSQLSet($fields, $values=null) {
             if (in_array($value,$ex)) {
                 $sql .= " `$field`= $value";
             } else {
-                $sql .= " `$field`='".mysql_escape_string($value)."'";
+                $sql .= " `$field`='".mysql_real_escape_string($value)."'";
             }
         }
     }
@@ -157,7 +150,7 @@ function buildSQLInsert($array, $table=null) {
     $sql .= ') VALUES (';
     $c = 0;
        foreach($array as $field=>$value) {
-        $v = mysql_escape_string($value);
+        $v = mysql_real_escape_string($value);
         if ($c++) $sql .= ',';
         if (in_array($v, $ex))
             $sql .= " $v ";
@@ -165,7 +158,7 @@ function buildSQLInsert($array, $table=null) {
             $sql .= " '$v' ";
     }
     $sql .= ')';
-    return (is_null($table)?$sql:('INSERT INTO `'.$table.'` '.$table));
+    return (is_null($table)?$sql:('INSERT INTO `'.$table.'` '.$sql));
 }
 
 function build_str($query_array) {
@@ -180,11 +173,6 @@ function build_str($query_array) {
 }
 
 function newQS($key, $val=null) {
-    /*
-    parse_str($_SERVER['QUERY_STRING'], $arr);
-    $arr[$key] = $val;
-    return '?'.build_str($arr);
-    */
     return newQSA(array($key=>$val));
 }