comparison: www/includes/db_recipes.php
www/includes/db_recipes.php
- changeset 142
- 793af7691a5e
- parent 130
- 601920b902e5
- child 143
- 122f64716161
equal
deleted
inserted
replaced
| 141:fe9e2a677611 | 142:793af7691a5e |
|---|---|
| 12 | 12 |
| 13 $escapers = array("\\", "/", "\"", "\n", "\r", "\t", "\x08", "\x0c"); | 13 $escapers = array("\\", "/", "\"", "\n", "\r", "\t", "\x08", "\x0c"); |
| 14 $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b"); | 14 $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b"); |
| 15 $rescapers = array("'"); | 15 $rescapers = array("'"); |
| 16 $rreplacements = array("\\'"); | 16 $rreplacements = array("\\'"); |
| 17 $disallowed = array('visibleindex','uniqueid','boundindex','uid'); | 17 $disallowed = array('visibleindex','uniqueid','boundindex','uid','h_weight'); |
| 18 | 18 |
| 19 if (isset($_POST['insert']) || isset($_POST['update'])) { | 19 if (isset($_POST['insert']) || isset($_POST['update'])) { |
| 20 if (isset($_POST['insert'])) { | 20 if (isset($_POST['insert'])) { |
| 21 // INSERT COMMAND | 21 // INSERT COMMAND |
| 22 $sql = "INSERT INTO `recipes` SET "; | 22 $sql = "INSERT INTO `recipes` SET "; |
