From 33d95b8059fcf40e5c70ad7fbcfa0565a9c05473 Mon Sep 17 00:00:00 2001
From: tbrehm <t.brehm@ispconfig.org>
Date: Tue, 27 Oct 2009 14:51:33 +0000
Subject: [PATCH] Fixed: FS#945 - Table columns should be quoted in
Server/lib/classes/db_mysql.inc.php
---
server/lib/classes/db_mysql.inc.php | 4 +++-
server/plugins-available/apache2_plugin.inc.php | 4 ++--
2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/server/lib/classes/db_mysql.inc.php b/server/lib/classes/db_mysql.inc.php
index 986aa81f7..1a3b97891 100644
--- a/server/lib/classes/db_mysql.inc.php
+++ b/server/lib/classes/db_mysql.inc.php
@@ -189,7 +189,8 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
return $out;
}
-
+ /*
+ //* These functions are deprecated and will be removed.
function insert($tablename,$form,$debug = 0)
{
if(is_array($form)){
@@ -224,6 +225,7 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
if($debug == 1) echo "mySQL Error Message: ".$this->errorMessage;
}
}
+ */
public function closeConn()
{
diff --git a/server/plugins-available/apache2_plugin.inc.php b/server/plugins-available/apache2_plugin.inc.php
index 995cd21a8..3c3f7658e 100644
--- a/server/plugins-available/apache2_plugin.inc.php
+++ b/server/plugins-available/apache2_plugin.inc.php
@@ -144,8 +144,8 @@ class apache2_plugin {
exec("chmod 400 $key_file2");
@unlink($config_file);
@unlink($rand_file);
- $ssl_request = file_get_contents($csr_file);
- $ssl_cert = file_get_contents($crt_file);
+ $ssl_request = $app->db->quote(file_get_contents($csr_file));
+ $ssl_cert = $app->db->quote(file_get_contents($crt_file));
/* Update the DB of the (local) Server */
$app->db->query("UPDATE web_domain SET ssl_request = '$ssl_request', ssl_cert = '$ssl_cert' WHERE domain = '".$data["new"]["domain"]."'");
$app->db->query("UPDATE web_domain SET ssl_action = '' WHERE domain = '".$data["new"]["domain"]."'");
--
GitLab