From 7e85566f012cf1f39882eaa944caeac52d33a553 Mon Sep 17 00:00:00 2001
From: Harrison <Harrison@73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee>
Date: Wed, 23 Dec 2009 02:38:52 +0000
Subject: [PATCH] Escaping

git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@239 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
---
 OTHER/update-mysql.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/OTHER/update-mysql.php b/OTHER/update-mysql.php
index 392e371..de584a4 100644
--- a/OTHER/update-mysql.php
+++ b/OTHER/update-mysql.php
@@ -221,17 +221,17 @@ function front_db_conversion() {
 	$rules	= $tc_db->GetAll("SELECT * FROM `" . KU_DBPREFIX . "rules` ORDER BY `order`");
 
 	foreach ($news as $newspost) {
-		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `subject` , `message` , `timestamp` , `poster` , `email` ) VALUES ( '0', '" . $newspost['subject'] . "' , '" . $newspost['message'] . "' , '" . $newspost['postedat'] . "' , '" . $newspost['postedby'] . "' , '" . $newspost['postedemail'] . "' )");
+		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `subject` , `message` , `timestamp` , `poster` , `email` ) VALUES ( '0', " . $tc_db->qstr($newspost['subject']) . " , " . $tc_db->qstr($newspost['message']) . " , " . $tc_db->qstr($newspost['postedat']) . " , " . $tc_db->qstr($newspost['postedby']) . " , " . $tc_db->qstr($newspost['postedemail']) . " )");
 	}
 	echo 'Updated news table.<br />';
 
 	foreach ($faq as $faqpost) {
-		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `order`, `subject` , `message` ) VALUES ( '1', '" . $faqpost['order'] . "' , '" . $faqpost['heading'] . "' , '" . $faqpost['message'] . "' )");
+		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `order`, `subject` , `message` ) VALUES ( '1', " . $tc_db->qstr($faqpost['order']) . " , " . $tc_db->qstr($faqpost['heading']) . " , " . $tc_db->qstr($faqpost['message']) . " )");
 	}
 	echo 'Updated FAQ table.<br />';
 
 	foreach ($rules as $rulespost) {
-		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `order`, `subject` , `message` ) VALUES ( '2', '" . $rulespost['order'] . "' , '" . $rulespost['heading'] . "' , '" . $rulespost['message'] . "' )");
+		$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "front` ( `page`, `order`, `subject` , `message` ) VALUES ( '2', " . $tc_db->qstr($rulespost['order']) . " , " . $tc_db->qstr($rulespost['heading']) . " , " . $tc_db->qstr($rulespost['message']) . " )");
 	}
 	echo 'Updated rules table.<br />';