From f7c0480f1b69c44d5daf47d343aaba44ebd26ec2 Mon Sep 17 00:00:00 2001 From: Friendika Date: Tue, 9 Nov 2010 15:11:47 -0800 Subject: use raw db queries wherever query items could contain '%' --- mod/profiles.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'mod/profiles.php') diff --git a/mod/profiles.php b/mod/profiles.php index b8151eadd..26e8d4ec5 100644 --- a/mod/profiles.php +++ b/mod/profiles.php @@ -249,7 +249,7 @@ function profiles_content(&$a) { dbesc_array($r1[0]); - $r2 = q("INSERT INTO `profile` (`" + $r2 = dbq("INSERT INTO `profile` (`" . implode("`, `", array_keys($r1[0])) . "`) VALUES ('" . implode("', '", array_values($r1[0])) -- cgit v1.2.3