use raw db queries wherever query items could contain '%'

This commit is contained in:
Friendika 2010-11-09 15:11:47 -08:00
parent c50f491c3d
commit f7c0480f1b
4 changed files with 13 additions and 3 deletions

View file

@ -550,7 +550,7 @@ function item_store($arr) {
logger('item_store: ' . print_r($arr,true), LOGGER_DATA);
$r = q("INSERT INTO `item` (`"
$r = dbq("INSERT INTO `item` (`"
. implode("`, `", array_keys($arr))
. "`) VALUES ('"
. implode("', '", array_values($arr))