use raw db queries wherever query items could contain '%'

This commit is contained in:
Friendika 2010-11-09 15:11:47 -08:00
parent c50f491c3d
commit f7c0480f1b
4 changed files with 13 additions and 3 deletions

View file

@ -134,6 +134,16 @@ function q($sql) {
return $ret;
}}
// raw db query, no arguments
if(! function_exists('dbq')) {
function dbq($sql) {
global $db;
$ret = $db->q($sql);
return $ret;
}}
// Caller is responsible for ensuring that any integer arguments to
// dbesc_array are actually integers and not malformed strings containing