diff options
| author | Andrey Andreev <narf@devilix.net> | 2017-02-20 10:47:46 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-02-20 10:47:46 +0100 |
| commit | 529e2a5661166bbd1fca4cc675dcd8f10c669ddd (patch) | |
| tree | 1959d64854b15fa55180dfb26b973a5bb0c999a6 /system | |
| parent | f87e4f887268d8fa919bdd764b97592925bbcf23 (diff) | |
| parent | 5b0d89da6a0e66f0f10f7fa43383290c99193bdb (diff) | |
Merge pull request #5023 from vlakoff/db-escape
Do not strip substrings looking like URL encode sequences
Diffstat (limited to 'system')
| -rw-r--r-- | system/database/DB_driver.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/system/database/DB_driver.php b/system/database/DB_driver.php index 161e0e225..de599a675 100644 --- a/system/database/DB_driver.php +++ b/system/database/DB_driver.php @@ -1118,7 +1118,7 @@ abstract class CI_DB_driver { */ protected function _escape_str($str) { - return str_replace("'", "''", remove_invisible_characters($str)); + return str_replace("'", "''", remove_invisible_characters($str, FALSE)); } // -------------------------------------------------------------------- |