Mercurial > bms / file diff

--- a/www/prod_duplicate.php	Fri Mar 01 14:49:33 2019 +0100
+++ b/www/prod_duplicate.php	Fri Mar 01 16:19:27 2019 +0100
@@ -10,6 +10,9 @@
 	return 1;
 }
 
+$rescapers = array("'");
+$rreplacements = array("\\'");
+
 date_default_timezone_set('Europe/Amsterdam');
 if (isset($_GET["record"]))
 	$record = $_GET["record"];
@@ -197,11 +200,11 @@
 $sql .= "', prop3_volume='" . $row['prop3_volume'];
 $sql .= "', prop4_type='" . $row['prop4_type'];
 $sql .= "', prop4_volume='" . $row['prop4_volume'];
-$sql .= "', json_fermentables='" . $row['json_fermentables'];
-$sql .= "', json_hops='" . $row['json_hops'];
-$sql .= "', json_miscs='" . $row['json_miscs'];
-$sql .= "', json_yeasts='" . $row['json_yeasts'];
-$sql .= "', json_mashs='" . $row['json_mashs'];
+$sql .= "', json_fermentables='" . str_replace($rescapers,$rreplacements,$row['json_fermentables']);
+$sql .= "', json_hops='" . str_replace($rescapers,$rreplacements,$row['json_hops']);
+$sql .= "', json_miscs='" . str_replace($rescapers,$rreplacements,$row['json_miscs']);
+$sql .= "', json_yeasts='" . str_replace($rescapers,$rreplacements,$row['json_yeasts']);
+$sql .= "', json_mashs='" . str_replace($rescapers,$rreplacements,$row['json_mashs']);
 $sql .= "';";
 syslog(LOG_NOTICE, $sql);