Use wpdb->escape instead of addslashes to prepare DB bound data.

git-svn-id: http://svn.automattic.com/wordpress/trunk@2699 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2005-07-05 20:47:22 +00:00
parent a79476f1e7
commit 91efba11ad
19 changed files with 101 additions and 89 deletions
--- a/wp-includes/functions-formatting.php
+++ b/wp-includes/functions-formatting.php
@@ -523,10 +523,13 @@ function trailingslashit($string) {
 }

 function addslashes_gpc($gpc) {
-	if (!get_magic_quotes_gpc()) {
-		$gpc = addslashes($gpc);
+	global $wpdb;
+
+	if (get_magic_quotes_gpc()) {
+		$gpc = stripslashes($gpc);
 	}
-	return $gpc;
+
+	return $wpdb->escape($gpc);
 }

 function antispambot($emailaddy, $mailto=0) {