summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndrey Andreev <narf@devilix.net>2017-02-20 10:47:46 +0100
committerGitHub <noreply@github.com>2017-02-20 10:47:46 +0100
commit529e2a5661166bbd1fca4cc675dcd8f10c669ddd (patch)
tree1959d64854b15fa55180dfb26b973a5bb0c999a6
parentf87e4f887268d8fa919bdd764b97592925bbcf23 (diff)
parent5b0d89da6a0e66f0f10f7fa43383290c99193bdb (diff)
Merge pull request #5023 from vlakoff/db-escape
Do not strip substrings looking like URL encode sequences
-rw-r--r--system/database/DB_driver.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/system/database/DB_driver.php b/system/database/DB_driver.php
index 161e0e225..de599a675 100644
--- a/system/database/DB_driver.php
+++ b/system/database/DB_driver.php
@@ -1118,7 +1118,7 @@ abstract class CI_DB_driver {
*/
protected function _escape_str($str)
{
- return str_replace("'", "''", remove_invisible_characters($str));
+ return str_replace("'", "''", remove_invisible_characters($str, FALSE));
}
// --------------------------------------------------------------------