diff --git a/interface/lib/classes/tform.inc.php b/interface/lib/classes/tform.inc.php index 6725a1d86b926a01b57b0adeb35b011304a88c36..e58af0dfa09ed9cdc451b993629ef3196e09d1b1 100644 --- a/interface/lib/classes/tform.inc.php +++ b/interface/lib/classes/tform.inc.php @@ -600,7 +600,7 @@ class tform { * @param record = Datensatz als Array * @return record */ - function encode($record,$tab) { + function encode($record,$tab,$dbencode = true) { global $app; if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab is empty or does not exist (TAB: $tab)."); @@ -614,14 +614,14 @@ class tform { switch ($field['datatype']) { case 'VARCHAR': if(!@is_array($record[$key])) { - $new_record[$key] = (isset($record[$key]))?$app->db->quote($record[$key]):''; + $new_record[$key] = (isset($record[$key]))?$record[$key]:''; } else { $new_record[$key] = implode($field['separator'],$record[$key]); } break; case 'TEXT': if(!is_array($record[$key])) { - $new_record[$key] = $app->db->quote($record[$key]); + $new_record[$key] = $record[$key]; } else { $new_record[$key] = implode($field['separator'],$record[$key]); } @@ -658,7 +658,7 @@ class tform { //if($key == 'refresh') die($record[$key]); break; case 'DOUBLE': - $new_record[$key] = $app->db->quote($record[$key]); + $new_record[$key] = $record[$key]; break; case 'CURRENCY': $new_record[$key] = str_replace(",",".",$record[$key]); @@ -686,8 +686,9 @@ class tform { $this->errorMessage .= $this->wordbook[$errmsg]."
\r\n"; } } - - + + //* Add slashes to all records, when we encode data which shall be inserted into mysql. + if($dbencode == true) $new_record[$key] = $app->db->quote($new_record[$key]); } } return $new_record; diff --git a/interface/lib/classes/tform_actions.inc.php b/interface/lib/classes/tform_actions.inc.php index d5254c8502ed290aec30c83132baea2719535706..84e997b97ccfcf085639a343f8f6836d25705be3 100644 --- a/interface/lib/classes/tform_actions.inc.php +++ b/interface/lib/classes/tform_actions.inc.php @@ -537,7 +537,7 @@ class tform_actions { if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission')); } else { // $record = $app->tform->encode($_POST,$this->active_tab); - $record = $app->tform->encode($this->dataRecord,$this->active_tab); + $record = $app->tform->encode($this->dataRecord,$this->active_tab,false); } $this->dataRecord = $record;