use raw db queries wherever query items could contain '%'
This commit is contained in:
@@ -106,7 +106,7 @@ function dfrn_notify_post(&$a) {
|
||||
|
||||
dbesc_array($msg);
|
||||
|
||||
$r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg))
|
||||
$r = dbq("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg))
|
||||
. "`) VALUES ('" . implode("', '", array_values($msg)) . "')" );
|
||||
|
||||
// send email notification if requested.
|
||||
|
||||
Reference in New Issue
Block a user